An application vendor representative asked me to grant dbowner access to tempdb for their application login; to be able to create objects in tempdb without "#" or "##" prefixes. I tried to convince him to forget asking for direct tempdb access by arguing that granting direct access may interfere with SQL Server engine internal operations and prevent tempdb cleanup processes to do their jobs correctly. And also there is another drawback on SQL Service restarts which causes any permission setting on tempdb to revert to defaults.
Is there anything that I might miss in this regard?
tempdbis re-created every time SQL Server is started so that the system always starts with a clean copy of the database and Backup and restore operations are not allowed ontempdb. In my opinion you should change application vendors just as quickly as you possibly can.db_owneris a pretty bad idea, at the most you could give themdb_ddladmin. But as mentioned, everything gets wiped anyway, so it's unclear what they are trying to achieve. You can change themodeldatabase, which is used to recreatetempdbbut that's probably an even worse idea