Questions tagged [permissions]
Privileges granted to an account or role through the security mechanism of an operating system, database manager or other system.
1,259
questions
0
votes
1answer
8 views
2 logins with the same permissions
I currently have a login that has the server roles "sysadmin" and "public". I would like that user to only be able to have access and see 6 specific databases, but not the other 4 databases that are ...
4
votes
0answers
45 views
how to remove all permissions in a database?
every time I need to either restore a database or reinitialize a replication publication I first (on the restored to be or subscription database) I script all the permissions, triggers, indexes, ...
1
vote
1answer
29 views
how to list the SSRS permissions in each folder in the reporting services server?
I have the following powershell script that downloads all the RDL from a reporting services server.
I am not the author to whom I am very thankful. It has been very useful for downloading the RDLs.
...
0
votes
1answer
12 views
AWS RDS : Setting Create and other grants only for single Database is not working
We are using AWS RDS Mysql, and we are trying to give SELECT access to all databases i.e RO only, but for a single database, we want to give all permissions i.e CRUD. It's not working out ...
1
vote
5answers
114 views
Granting a user a permission to restore a database
In a database I created a user with the following roles:
Server Roles
public
Database roles
db_backupoperator
db_ddladmin
db_datareader
db_datawriter
The problem is I don't want to change the ...
0
votes
1answer
22 views
Manage Postgres user permissions with many databases and users
How do you manage users' permissions efficiently when your company has a lot of databases and users?
My company has > 20 reporting databases. Whenever I need to change permission for some users, I ...
0
votes
1answer
22 views
How To Grant A User In AD Groups Which Is Denied To DML Commads, To Update On A Spesific Tables
I have a Active Directory user account named SQLQRY in my sql server. SQLQRY is permitted only read data. Those users can use onyl select statement. I need to give just update and delete permission on ...
0
votes
1answer
44 views
SQL Statement Layer Filter Queries Limit Access
Goal: Want to create a so called "SQL Statement Layer" which checks/filters all incoming queries. If incoming query is invalid, should be denied.
Use-case: Limit database access and avoid ...
0
votes
1answer
47 views
List users permissions to tables and schemas on MSSQL 2016
List all permissions for a given role? has a nice query for listing users and their roles on a DB.
How could we list all tables and users with their permissions on these tables?
0
votes
4answers
55 views
What role is able to grant role permissions on MSSQL 2016?
Unfortunately, we'll have to remove db_owner role from not admin users, because people were abusing it.
We'll split roles permissions in 3 groups:
1) readonly (SELECT) with specific write (INSERT,...
0
votes
3answers
62 views
Grant MonitorAdmin / PROCESS privilege to user
I need to assign the monitoradmin privilege to a user because this is what an application called "dynatrace" needs to monitor the server (some details in a post on their site).
According to https://...
3
votes
1answer
66 views
How to grant permission to execute stored procedure in master database from another database
Our developers have a domain account used by their application that needs to be able to execute stored procedures created in the master database using the "sp_" naming convention from other databases ...
0
votes
1answer
37 views
Query for: view users and permissions (roles) from root security folder (MS SQL)
On the Internet I found a lot of scripts how to display users and their permissions under a particular database (Security folder under table) - for example sp_helpuser.
Currently, however, I need to ...
2
votes
2answers
44 views
Permission hierarchy vs. WITH GRANT OPTION
I have an Azure SQL database with this security setup:
SchemaUpdater user with db_ddladmin, db_datawriter, and db_datareader roles. The user is used to execute database change scripts during ...
0
votes
0answers
21 views
How to handle spoon err: Permission Denied in Redis
I'm new to Redis and I'm facing this error on Windows 10 Pro (64 bit) when trying to do the background save of Redis:
[14932] 18 Jan 10:57:24 # Failed saving the DB: Permission denied
[14932] 18 Jan ...
0
votes
1answer
33 views
How to Grant A User Under A Sql Domain Account To Insert and Update Records
I have a sql domain account in sql server like DOMAIN\GroupName. There are many user accounts under that account like DOMAIN\user.name. I want to give insert and update permission only to a user under ...
0
votes
1answer
71 views
You do not have permission [closed]
I have this grant permission below
use eNtsaRegistrationDB
go
grant select on UserReg to Users;
Cannot find the object 'UserReg', because it does not exist or you do not have permission.
Both of ...
2
votes
1answer
61 views
db_datawriter vs grant delete, update, insert
I have an application set up in which the service account uses a user defined role which has each object in the database defined with specific permissions. It seems that every table in the database is ...
0
votes
0answers
23 views
SSRS 2017 permissions required to deploy
I'm having issues with one of our developers deploying reports to SSRS, they seem to be able to deploy datasets, however not reports themselves. As a temporary measure, we've granted all privileges e....
0
votes
1answer
42 views
Create limited admin role in SQL Server that cannot alter row level security
I would like to know if there is a practical way to create an admin role in SQL Server that can essentially do anything except alter row level security policy.
It is simple enough to create row level ...
3
votes
1answer
282 views
In the context of another principal what permissions hinge on the identity of the database owner?
By "database owner", here, I mean the principal whose SID is sys.databases.owner_sid.
This answer to the question of best practices for database ownership includes the following:
The answer here ...
13
votes
2answers
2k views
Why is database ownership by groups not allowed? Which user should own a database?
Per microsoft "ALTER AUTHORIZATION for databases for SQL Server":
Requirements for the new owner:
The new owner principal must be one of the following:
A SQL Server authentication ...
-1
votes
2answers
68 views
Sql Server roles [closed]
Recently I was asked question - what is the difference between Standard Server roles and Fixed server roles.
I know Fixed Server roles include: Sysadmin, Securityadmin, etc.
I am not sure about ...
1
vote
1answer
26 views
postgresql: make objects owned by parent role
I have a set of apps that produce data. Each app has its own credentials to access the DB, and they all inherit from a common role (producer).
I'd like to set default privileges to grant access to ...
8
votes
1answer
143 views
Permissions required for row counts to show up on Object Explorer Details
I'm having a weird security issue. I have a user that's using SSMS 18.2 on a SQL 2016 server. They are a member of db_datareader but when they pull up the the Row Count column in Object Explorer ...
1
vote
3answers
69 views
How to Add A User To A Database In Standby / Read-Only Mode In Sql Server
I have a database which is in standby / read-only mode in my reporting server. But, I can not add a new user to this database. How can i add a new user to this database?
-1
votes
1answer
51 views
Denying DDL & DML Privileges Based On HostName
Developers must not use DML and DDL commands in my company. So, I revoked their authority like update, delete, or drop commands. But, they are able to alter or update some stored procedures or records ...
0
votes
0answers
47 views
Executing 'GRANT SELECT' in a trigger possible?
Trying to grant select privilege on table USER1.AAA to USER2 when table USER1.AAA is created, using system trigger.
The trigger below seems to be processed when table AAA is created but it receives ...
0
votes
1answer
42 views
Can a role be granted roles+privileges in oracle all at the same time?
I know that you can grant a role:
Other roles
System privileges
Object privileges
But, can you grant to the same role all at once? I mean, for example you grant a role:
2 roles
1 system ...
3
votes
1answer
148 views
Allowing non-privileged users to cause privileged code to run
Context:
Our SQL server is used for teaching, and we need to be able to automatically create databases for the students on demand and in real-time. We also need the students to be able to delete ...
1
vote
1answer
45 views
SQL server database Role management - Azure SQL MI
In my database I have multiple users with SQL server authentication login and AD login.
For ex: User 1 and user 2 are from same team(ABC), if I create a role db_abc
User 1 needs read access to table ...
3
votes
2answers
111 views
Restore from SQL Server 2008 to 2014
When a full-backup is restored by the DBA, does the DBA need to restore permissions, users, and roles separately? Or does it all come with the full restore?
I am from the dev team. We are migrating ...
0
votes
1answer
31 views
User Account Mismatch
My disk crashed so I reinstalled SQL Server to a new drive and restored my databases from my backup drive. However, when I attempt to install Diagram support, I get this message:
Cannot execute as ...
-1
votes
1answer
95 views
CREATE/ALTER INDEX permission
How can I grant a user create/alter index permissions without giving db_ddladmin? I want them to have the minimum permissions possible.
0
votes
1answer
49 views
Windows user automatically gets db_owner?
All databases from a server have just been migrated to a new server. It looks as if some users were carried across and some weren't, I'm not really sure as I did not know the server very well.
One ...
4
votes
3answers
114 views
SQL Server User Can't See All Logins
I have a SQL Server 2016 instance and I've just noticed that some user logins aren't listed for some users. For example, if I execute this query:
select count(*) FROM sys.database_principals a where ...
0
votes
1answer
21 views
Group not inheriting access privileges for all tables
I can't figure out why tables created by one user can be accessed by a read-only user, but not tables created by another user.
I have a viewers read-only group with this access:
-- Grant access ...
0
votes
2answers
50 views
Same query, different result (depending on user's permissions)
A question about SQL in general:
If two users execute the same sql statement, is it possible that user1 gets different results than user2?
Imagine user1 has more permissions than user2.
With other ...
1
vote
1answer
36 views
migrate users from mariadb10.1 to mysql5.7
My company is moving our databases from self-hosted mariadb 10.1 to Google CloudSQL (which is essentially MySQL 5.7).
Dumping / restoring our application schemas looks straightforward. However I'm ...
1
vote
1answer
44 views
User is in multiple Active Directory groups with multiple roles in database
I have a user that is a member of multiple Active Directory (AD) groups. Within SQL Server 2012, these AD groups have been assigned to different database roles. This user is not getting the correct ...
0
votes
0answers
38 views
How to grant a group to another group in Redshift
I am trying to build a matrix of roles to dynamically change priorities for our users. In other database I would be doing something like:
create role role1;
create role role2;
grant role role1 to ...
4
votes
1answer
291 views
Can SET IDENTITY_INSERT be allowed with less privileges than db_ddladmin?
I've inherited a system where the application is running under sysadmin account.
I limited this account to db_datareader + db_datawriter + EXECUTE on all database and set extended events session to ...
2
votes
0answers
41 views
Error in ALTER DEFAULT PRIVILEGES
I'm trying to create a new user in AWS Aurora Postgres DB.
Create user worked fine and I can login to the DB using that account.
granting permissions to it isn't.
First:
GRANT ALL on ALL tables in ...
0
votes
2answers
40 views
How do you detect whether you have permission to query sys.dm_os_performance_counters?
According to the sys.dm_os_performance_counters documentation:
On SQL Server, requires VIEW SERVER STATE permission.
On SQL Database Premium Tiers, requires the VIEW DATABASE STATE permission ...
0
votes
0answers
30 views
Linked Server using Impersonation fails SSMS GUI Connection test but sp_testlinkedserver succeeds
I have a linked server (Server B) set up on Server A with permissions set as follows:
This means that there are five Windows Logins (of which my windows account is one) who can access the linked ...
0
votes
1answer
111 views
MySQL least privileges to get database/tables size
I'm using centreon_plugins to monitor some mysql databases. As a best practice I create a dedicated user for monitoring and I give it the least possible privileges.
For simple monitoring I usually ...
1
vote
0answers
39 views
If a Login is not granted the db_ddladmin role on a database, but is individually granted CREATE VIEW on it, will they still be denied?
Since SQL Server permissions work as "deny first", I was wondering if that applies downward to individual permissions that are granted, if the parent permission isn't granted e.g. db_ddladmin is not ...
2
votes
1answer
115 views
Why can't I create a new schema with the owner set to dbo?
I created a test account for checking permissions against.
It currently has the db_datareader, db_datawriter, and db_ddladmin roles for the Northwind database.
But when it tries to create a new schema ...
0
votes
1answer
35 views
Why is MongoDB user with the only privilege as “find” able to insert and update collection?
I want my user to have only find action privilege on a specific collection. However, when I create the user with the privilege, restart the mongod server and run the mongo shell again with -u -p and --...
1
vote
2answers
88 views
SSMS login by external developers
This is my first question so please bear with me !
We have an external company whose developers need to login into an instance on our on-premise SQL Server 2016.
They have AD logins, and these are ...
