My scenario: I have some groups with full - and inappropriate - access to all Sql Server instances. I want to change that.
My Plan: Give full and automatic access to all databases (it is customer databases and this groups must be allowed to change any property if necessary).
Restrict permissions on Instance Level, because this groups should not be allowed to do any unexpected change on instance properties.
I don't want to create a user in databases, because our external customer could drop the user ( they have db_owner permission )
Someone have any idea? Tks