Sunday, March 11, 2012

Creating security roles

Hello,

I have users with different roles accessing my system.

For eg, for database Adventure:

Role 1 - Can only read write data but not update

Role 2 - Can read, write and update

Role 3 - Can search data and run reports

Role 4 - Can backup, create users, replication, Run SSIS.

How do I create scripts for such users.

Regards,

Vidya.

Do it the easy way. Create the roles in the GUI and then hit the "Script" button at the top.

And you may want to grant permissions to the schemas, so that new tables you add will have the right permissions.

Rob|||

Look up Server, Integration Services andDatabase Level roles in books online.

This should get you started:

Role 1 - Can only read write data but not update db_datareader

Role 2 - Can read, write and update db_datawriter and db_datareader

Role 3 - Can search data and run reports db_datareader, run reports is outside of T-SQL jurisdiction. Try the Reporting Services forum

Role 4 - Can backup - BACKUP DATABASE and BACKUP LOG permissions default to members of the sysadmin fixed server role and the db_owner and db_backupoperator fixed database roles.

create users, requires ALTER ANY USER rights, or db_owner

replication, Not sure, might be CONTROL SERVER server privilege or sysadmin,

Run SSIS db_dtsadmin, db_dtsltduser, and db_dtsoperator

|||thanks

No comments:

Post a Comment