While organizing my vast resources on my hard drive, I recently found, polished, and improved two SQL Server queries that allow us to check which users and groups have access to BAM resources.
These are simple SQL Queries, but they are essential for maintaining control of your environment and ensuring compliance with security and privacy standards.
Generally, BizTalk Server is compatible with all privacy standards, such as GDPR or FIPS. BizTalk Server is a messaging broker that doesn’t capture or store any data on its system beyond what’s needed to complete business processes and connect and route messages to their target systems. However, because you can process messages and/or communicate with systems that contain sensitive data (personal data), you must have some good practices in BizTalk Server Applications to comply with privacy standards.
Business Activity Monitoring (BAM) is a collection of tools that allow you to manage aggregations, alerts, and profiles to monitor relevant business metrics (called Key Performance Indicators, or KPIs). It gives you end-to-end visibility into your business processes, providing accurate information about the status and results of various operations, processes, and transactions so you can address problem areas and resolve issues within your business. But it is also a component that can capture data from the messages passing by the systems, and some of this data can be sensitive – that shouldn’t happen, but it can happen.
So, it is always good in terms of security, control, documentation, and in some cases, privacy to know which users can access BAM data.
📝 One-Minute Brief
Learn how to check which users and groups have access to BizTalk BAM resources using two simple SQL queries. These scripts help administrators ensure proper security, governance, and compliance—especially when BAM may contain sensitive business data.
BizTalk Server: SQL Query to list all Users with access to BAMPrimaryImport database
This is a simple SQL Server Query that provides a list of all users who have access to the BAMPrimaryImport database.

THIS SQL SCRIPT IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND.
BizTalk Server: SQL Query to list all Users with access to BAM Views
This is a simple SQL Server Query that provides a list of all users’ access to a specific or to all BAM Views

THIS SQL SCRIPT IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND.
Hope you find this helpful! If you liked the content or found it useful and would like to support me in writing more, consider buying (or helping to buy) a Star Wars Lego set for my son.