I want to deny an AD account to delete any record in sql server. How can i do that? DENY DELETE TO [usergorup\username] did not work. Is there another way?

  • 2
    What permissions are currently granted? Accounts can't delete data without having permission to do so. Jul 11, 2019 at 10:11
  • There is a SQLDML permission on the User Mapping -> Database role membership for. How can i find that SQLDML permission? Where does it take place? Thank you.
    – Omer
    Jul 11, 2019 at 10:13
  • 1
    When you say it "didn't work", what exactly have you tried and what happened? Jul 11, 2019 at 10:16
  • 2
    Could you produce a minimal reproducible example please? Jul 11, 2019 at 10:19
  • 3
    DENY DELETE TOonly denies the user in the current database where you execute the statement. Not the entire server/login. Jul 11, 2019 at 10:22

1 Answer 1


I solved my issue by executing "DENY DELETE TO [UserGroup\UserName]" statement one by one in every databases on the server. It will solve your issue if you have same situation like this.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.