dba team has some restriction on this role
The BDA admin has logic reasons to remove
securityadmin server role from the
SPfarm account, because from DBA preselective:
Members of the
securityadmin fixed server role can GRANT, DENY, and REVOKE server-level permissions.
They can also GRANT, DENY, and REVOKE database-level permissions if they have access to a database. Additionally, they can reset passwords for SQL Server logins.
The securityadmin role should be treated as equivalent to the sysadmin role.
Remove fixed server role 'SECURITYADMIN' for SPFARM user, is SharePoint and web applications will work?
Sure, it's not recommended, but it will work!!!!
But keep in mind: you will not be able to
- Run the configuration wizards correctly.
- Run PowerShell cmdlets that requires security access on the server level for SharePoint database.
- Perform configuration tasks like, Configure Services ...etc via CA or PS that requires security access.