1

I want to deny an AD account to delete any record in sql server. How can i do that? DENY DELETE TO [usergorup\username] did not work. Is there another way?

Improve this question
10
  • 2
    What permissions are currently granted? Accounts can't delete data without having permission to do so.
    – George.Palacios
    Commented Jul 11, 2019 at 10:11
  • There is a SQLDML permission on the User Mapping -> Database role membership for. How can i find that SQLDML permission? Where does it take place? Thank you.
    – Omer
    Commented Jul 11, 2019 at 10:13
  • 1
    When you say it "didn't work", what exactly have you tried and what happened?
    – George.Palacios
    Commented Jul 11, 2019 at 10:16
  • 2
    Could you produce a minimal reproducible example please?
    – George.Palacios
    Commented Jul 11, 2019 at 10:19
  • 3
    DENY DELETE TOonly denies the user in the current database where you execute the statement. Not the entire server/login.
    – Randi Vertongen
    Commented Jul 11, 2019 at 10:22

1 Answer 1

Reset to default
1

I solved my issue by executing "DENY DELETE TO [UserGroup\UserName]" statement one by one in every databases on the server. It will solve your issue if you have same situation like this.

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.