SQL Server: does ddladmin rights contain datareader and datawriter rights to the database?

Question

Does db_ddladmin fixed database role include db_datareader and db_datawriter rights, so that you don't have to grant those rights explicitly?

mrdenny · Accepted Answer · 2011-08-23 14:06:14Z

up vote 5 down vote accepted

I don't believe so. It should only allow them to run DDL not access tables.

You could make your own role and make it be a member of the db_ddladmin, db_datareader and db_datawriter roles.

answered Aug 23 '11 at 14:06

mrdenny♦
17.1k1442

Richard · Answer 2 · 2011-08-23 14:14:50Z

up vote 3 down vote

I agree with Mr. Denny. The DDL Admin role is exclusive of the Data Reader/Writer roles. One is for DDL and the other two are for DML.

answered Aug 23 '11 at 14:14

Richard
2,6301040

gbn · Answer 3 · 2011-08-23 18:43:23Z

up vote 3 down vote

Except for db_owner, the fixed db roles have no overlap with each other.

You can see this here ("Permissions of Fixed Database Roles") where the newer GRANT options are listed against the db_dostuff roles

answered Aug 23 '11 at 18:43

gbn
42.2k352104

3 Answers