SQL Server: does ddladmin rights contain datareader and datawriter rights to the database?

Question

Does db_ddladmin fixed database role include db_datareader and db_datawriter rights, so that you don't have to grant those rights explicitly?

mrdenny · Accepted Answer · 2011-08-23 14:06:14Z

7

I don't believe so. It should only allow them to run DDL not access tables.

You could make your own role and make it be a member of the db_ddladmin, db_datareader and db_datawriter roles.

answered Aug 23, 2011 at 14:06

mrdenny

27k2 gold badges41 silver badges81 bronze badges

Add a comment |

gbn · Accepted Answer · 2011-08-23 18:43:23Z

4

Except for db_owner, the fixed db roles have no overlap with each other.

You can see this here ("Permissions of Fixed Database Roles") where the newer GRANT options are listed against the db_dostuff roles

answered Aug 23, 2011 at 18:43

gbn

69.7k8 gold badges162 silver badges243 bronze badges

Add a comment |

Richard · Accepted Answer · 2011-08-23 14:14:50Z

3

I agree with Mr. Denny. The DDL Admin role is exclusive of the Data Reader/Writer roles. One is for DDL and the other two are for DML.

answered Aug 23, 2011 at 14:14

Richard

6,3538 gold badges41 silver badges62 bronze badges

Add a comment |

3 Answers 3