Questions tagged [role]

A set of permissions.

Filter by
Sorted by
Tagged with
0
votes
2answers
58 views

Can't alter database roles on a restored database

My SSMS Login (using an AD group) is allocated all server roles apart from sysadmin so I have quite a lot of access. Using this Login, I have restored a database from its .bak file. However, my Login ...
0
votes
1answer
19 views

Alter default privileges in postgres for other roles

Let's say I have a role called user1, user2 and postgres. Is it possible to alter the default privileges while logged in as postgres for objects created by user1 so that user2 can see them? This is ...
1
vote
2answers
60 views

How to grant permissions to allow anything inside a SQL Server schema?

I have a schema called training. I have a new role called training_modify. Here are the desired permissions for users placed in that role: Select, update, insert, and delete permissions on any object ...
1
vote
1answer
31 views

SQL Server Grant CRUD to Users on One Schema

I have a schema called training. I want users who will be trained to have CRUD permissions on any object on that schema. I do not want them to have any other permissions on any other object outside ...
1
vote
1answer
21 views

Postgres role does not inherit permissions of superuser role via membership in that role

In the snippet below, the role writer is a member of a superuser role named admin. The admin role can insert rows into a table but the writer role cannot insert rows into the same table. Why does the ...
0
votes
0answers
11 views

How to create a better Role-Based Access Control with customizable permissions?

I am trying to layout the tables I will need for my user authorization setup, but my case is a bit different than just assigning roles or permissions to a user. I currently have a companies table and ...
4
votes
1answer
428 views

How to prevent sysadmin server role from executing a stored procedure

I have a SQL Server default instance using SQL Server Authentication and two users, User1 and User2. User1 has the public server role while User2 has the public server role + sysadmin server role. ...
0
votes
1answer
16 views

Error when assigning a role to user

I have created a role called "role1" with these steps : postgres=# CREATE ROLE role1; CREATE ROLE postgres=# GRANT CONNECT ON DATABASE paybills TO role1; GRANT postgres=# \c paybills You are now ...
1
vote
1answer
27 views

How to grant SQL Agent proxy to a public role in MSSQL 2014

I want to grant SQL Agent proxy to a public role in msdb database in MSSQL 2014. I have the following query and I want this to return me some valid output. USE [msdb] SELECT sp.name AS proxyname ...
0
votes
1answer
12 views

postgres database with multiple database object owners and pg_dump

with a postgres 11.2 database with multiple database object owners and trying to use the following command as the database owner (not the postgres superuser): pg_dump -h hostname -p 5432 -U ...
0
votes
1answer
58 views

Set up a postgres database with a specific role without password prompt

Context I have a PostgreSQL server (localhost:5432) which holds a database called my_database. I have created long time ago, a simple role which owns this database; my_user, different from the ...
0
votes
1answer
33 views

Database level access in Azure SQL managed instance

In my Azure SQL managed instance I have two databases, Database_A and Database_B. User A_ABC has access only to Database_A and he is part of role db_owner. When the tries to alter a table we are ...
2
votes
5answers
238 views

Granting a user a permission to restore a database

In a database I created a user with the following roles: Server Roles public Database roles db_backupoperator db_ddladmin db_datareader db_datawriter The problem is I don't want to change the ...
0
votes
0answers
14 views

Postgres permission for new objects [duplicate]

Postgres version: 11 I've got 2 roles - one used for read and one for write on the same database. CREATE ROLE reader WITH login; CREATE ROLE writer WITH login; CREATE DATABASE thedatabase; GRANT ...
1
vote
1answer
590 views

Postgres get function owner

I would like to be able to get a table of function names and function owner names. Currently, this query returns a list of functions for a given schema: SELECT proname FROM pg_catalog....
0
votes
1answer
24 views

Why do databases in mongodb have roles?

I have read about mongodb role based access control and I have understood it to a large extent. I was going through this tutorial and when you run show roles on the mongo shell it returns a different ...
1
vote
1answer
38 views

What are the real life uses of role based authentication control in a database? [closed]

I am new to database management. I was going through the mongodb docs for Role Based Authentication Control. I have understood how it works, but I have a few questions. How is it applied in real life ...
2
votes
1answer
84 views

db_datawriter vs grant delete, update, insert

I have an application set up in which the service account uses a user defined role which has each object in the database defined with specific permissions. It seems that every table in the database is ...
-1
votes
2answers
73 views

Sql Server roles [closed]

Recently I was asked question - what is the difference between Standard Server roles and Fixed server roles. I know Fixed Server roles include: Sysadmin, Securityadmin, etc. I am not sure about ...
2
votes
1answer
426 views

How to force a sysadmin to store data in schema other than dbo? [duplicate]

I am using a GUI tool to upload data in my SQL Server 2016 database. The user being used for above task has been granted sysadmin permission I created a dedicated schema to store above data. This ...
0
votes
1answer
92 views

Secure postgres 9.5 database packed on Windows desktop application

My desktop app includes a postgres database and a front app. I need the db to be accessed only by my front app. The credentials of this user are going to reside in the front app binaries. I realized ...
0
votes
1answer
63 views

Can a role be granted roles+privileges in oracle all at the same time?

I know that you can grant a role: Other roles System privileges Object privileges But, can you grant to the same role all at once? I mean, for example you grant a role: 2 roles 1 system ...
1
vote
1answer
60 views

SQL server database Role management - Azure SQL MI

In my database I have multiple users with SQL server authentication login and AD login. For ex: User 1 and user 2 are from same team(ABC), if I create a role db_abc User 1 needs read access to table ...
0
votes
1answer
108 views

How to deny a user to access (select, insert, delete, update) to tables but grant (select) a few

i am trying to deny a user to access (select, insert, delete, update) to tables on my database but i also need him to grant only select to a few tables, to do this i created a user with login and gave ...
1
vote
1answer
70 views

User is in multiple Active Directory groups with multiple roles in database

I have a user that is a member of multiple Active Directory (AD) groups. Within SQL Server 2012, these AD groups have been assigned to different database roles. This user is not getting the correct ...
0
votes
0answers
74 views

How to grant a group to another group in Redshift

I am trying to build a matrix of roles to dynamically change priorities for our users. In other database I would be doing something like: create role role1; create role role2; grant role role1 to ...
2
votes
1answer
147 views

Is it safe to delete the default “postgres” role?

I'm trying to understand if it's okay for me drop the "postgres" role, or at the least, remove it as the superuser. Thanks!
2
votes
0answers
62 views

Error in ALTER DEFAULT PRIVILEGES

I'm trying to create a new user in AWS Aurora Postgres DB. Create user worked fine and I can login to the DB using that account. granting permissions to it isn't. First: GRANT ALL on ALL tables in ...
1
vote
0answers
42 views

If a Login is not granted the db_ddladmin role on a database, but is individually granted CREATE VIEW on it, will they still be denied?

Since SQL Server permissions work as "deny first", I was wondering if that applies downward to individual permissions that are granted, if the parent permission isn't granted e.g. db_ddladmin is not ...
0
votes
0answers
32 views

Listener on database creation for PostgreSQL

I'm trying to achieve a set of functions/triggers to define database (catalog) level read-only role for every database created. The way I thought of doing this is to create a listener (trigger/event ...
0
votes
1answer
36 views

Why is MongoDB user with the only privilege as “find” able to insert and update collection?

I want my user to have only find action privilege on a specific collection. However, when I create the user with the privilege, restart the mongod server and run the mongo shell again with -u -p and --...
0
votes
0answers
280 views

Verify if user has replication permissions in Postgres

I am working on streaming changes in my Postgres database using Debezium using the Postgres connector offered by Postgres. However, for the connector to work, the user must have REPLICATION and LOGIN ...
0
votes
0answers
15 views

Created an admin super user on Postgres, but logging in tells me I need an admin database [duplicate]

I'm running Postgres 9.6 on Mac High Sierra. I ran these commands to create an admin super user ... psql -d postgres -c "CREATE USER admin WITH PASSWORD 'password';" psql -d postgres -c "ALTER ...
3
votes
2answers
44 views

How can I determine which permissions needs to be assigned to the newly created login?

We have 4 databases which contain different procedures and functions. Till now the actual application can access the database using only the sa account, now I would like to change the app to use ...
0
votes
2answers
27 views

Postgresql - roles without linux accounts?

Basic question: what I'm reading describes how to create linux users in parallel with postgresql roles. However, I don't see the value in creating any of these users in linux - I just want to create ...
2
votes
2answers
66 views

How to find out all the permissions that belong to a specific server/ database role in SQL Server? [duplicate]

I can separately query all the server or database level permissions, but I want to know other thing. What server role do the given permissions exactly belong to? For example I want to see all the ...
0
votes
0answers
160 views

Can I get pg_dump to simplify the ACL commands?

When using pg_dump with a database with non-default schema foo like so: pg_dump --schema-only --schema='foo' -U myuser -d mydb -h myhost -W > mydb.sql The SQL dump file is full of these seemingly ...
0
votes
1answer
42 views

MySQL 8 roles - I'm probably missing something obvious

I'm trying to use roles in MySQL 8, and failing. I have read the documentation and as far as I can tell, I'm doing it right. Since this is a 'hello world' level attempt, I assume I'm missing something ...
1
vote
0answers
39 views

SQL Server Permissions for Intellisense for an Active Directory User? [duplicate]

I have created an Active Directory Group and created it as a user, we'll call it "AD SQL", in my DB. I can successfully login in using Active Directory Authentication and read/write. However, ...
0
votes
1answer
15 views

Details about existing roles and users in azure sql database

I would like to get details of all users existing in a sql server DB and the respective roles they are part of and the permissions granted/denied for the a role/user. what is the best way to get this ...
0
votes
1answer
537 views

How to grant permissions to database but restrict to certain schemas?

I am new to database administration and work within a small team of data analysts trying to modernise. We have recently set up an Azure SQL DB server we are accessing using SQL Server Management ...
2
votes
1answer
550 views

Naming Convention for Login, User and Roles? [closed]

What are the Naming Conventions for a Login, A database User and a Database role? Is there any best practice to follow?
0
votes
1answer
1k views

How to grant Unmask permission to a user at table level and column level in sql server?

How to grant unmask permission to a user for one particular table and to one particular column within a table? For example, if in table1 if column1 and column2 is masked and in table2 if column3 and ...
0
votes
5answers
840 views

Create Role or Create user

PostgreSQL version : 11.2 OS platform : RHEL 7.6 I am new to PostgreSQL. I have a CRM application whose data I want to store in my 11.2 PostgreSQL Database. The Database name will be : crm_db The ...
0
votes
1answer
2k views

SQL Server: Remove public role privileges from login account

I've got a SQL Server (2012) and I need to create a read-only user. At first, I was just going to create a user, and then give them the db_datareader role. But while looking around, I saw the public ...
1
vote
0answers
58 views

How to switch session role securely?

I'd like to setup a service through which my users can submit SQL queries to a database wherein I store some data. Users are assigned to organizations, and I've setup views that provide read access ...
1
vote
3answers
1k views

Cannot revoke permissions or drop user in PgSQL AWS RDS

I want to drop the user asd from the DB. So, I've got two DBs: foo and bar and the user apparently has dependencies in both. The DBs have been created from the root user postgres, but all tables and ...
1
vote
2answers
5k views

SQL Server database level roles for creating tables

Is there a way to create or change a special role for creating tables? Our software developer team has db_datareader and db_datawriter roles but they can not create new tables. I read this article ...
0
votes
1answer
996 views

Postgresql createrole permission for user

I created a role with createrole flag, but users in this role trying to create users fail with permissions denied. Do I need to assign the createrole to each user instead of just the role (group)? my ...
-1
votes
1answer
38 views

MongoDb User with readWrite can create database

I dont understand why my user can create data base. The user "toto" with role "readwrite" on DB1 can create a DataBase (db2). And with the same account "toto" I can create a user and affect this user ...

1
2 3 4 5