Questions tagged [role]

A set of permissions.

Filter by
Sorted by
Tagged with
0
votes
0answers
11 views

SQL Group Execution Rights to Read only SPs and functions - By not changing objects' schemas

We have a SQL Developer Group.. We want to give them access to execute functions and sps but not to any that amends data in any way.. We currently only have the DBO schema and all objects sits on that ...
0
votes
1answer
24 views

Postgres default privileges do not seem to work

I am trying to set up RBAC in Postgres where I have a database and a schema. I have a few roles provisioner, service, mydb_ro, and mydb_rw. I ran the following to change default privileges ALTER ...
1
vote
1answer
31 views

Do I need GRANT for INSERT to table If has EXECUTION GRANT for procedure?

I have five domain users and five roles in my database. GRANT EXECUTE adds to the appropriate roles. Roles are included in other roles, i.e. at most we have one role that has grants for two procedures,...
0
votes
0answers
20 views

Best practice privileges and roles for postgres schema migration

I'm having a re-look at roles and privileges in postgres to minimise the damage that a compromised account can do. Ownership and migrations is a part I'm having trouble getting my head around. As I ...
0
votes
1answer
42 views

Postgres role does not inherit permissions from its member role

I want to group my postgres database permissions to set of roles and then assign users to these parent roles to manage all permissions from a central place. I created a role called admins and granted ...
0
votes
2answers
21 views

Creating roles and granting rights to the role

I wanted to create a role called "user_updates" and this role should have the rights "table_note_updates". The rights called "table_note_updates" is already available in ...
-1
votes
1answer
31 views

how to resolve the error “ADMIN option not granted for role 'my_role_1'” [closed]

I am trying to grant a role to user. grant my_role_1 to ktest1 with admin option; But i am getting the below error Error report - ORA-01932: ADMIN option not granted for role 'my_role_1' 01932. 00000 ...
0
votes
0answers
23 views

Best way to clone a user in Postgresql?

I need to create a clone of a database owner. I I have the following script: create role oclone with password 'xxx' LOGIN INHERIT CREATEDB CREATEROLE; grant dbowner to oclone; alter role oclone set ...
0
votes
1answer
42 views

How to copy user rights and roles from one user to another

I require a PL/SQL script that copies all of a user's rights, roles and mandates from one user to another. I am using Oracle 12c.
0
votes
2answers
62 views

Can't alter database roles on a restored database

My SSMS Login (using an AD group) is allocated all server roles apart from sysadmin so I have quite a lot of access. Using this Login, I have restored a database from its .bak file. However, my Login ...
0
votes
1answer
26 views

Alter default privileges in postgres for other roles

Let's say I have a role called user1, user2 and postgres. Is it possible to alter the default privileges while logged in as postgres for objects created by user1 so that user2 can see them? This is ...
1
vote
2answers
73 views

How to grant permissions to allow anything inside a SQL Server schema?

I have a schema called training. I have a new role called training_modify. Here are the desired permissions for users placed in that role: Select, update, insert, and delete permissions on any object ...
1
vote
1answer
58 views

SQL Server Grant CRUD to Users on One Schema

I have a schema called training. I want users who will be trained to have CRUD permissions on any object on that schema. I do not want them to have any other permissions on any other object outside ...
1
vote
1answer
47 views

Postgres role does not inherit permissions of superuser role via membership in that role

In the snippet below, the role writer is a member of a superuser role named admin. The admin role can insert rows into a table but the writer role cannot insert rows into the same table. Why does the ...
0
votes
0answers
12 views

How to create a better Role-Based Access Control with customizable permissions?

I am trying to layout the tables I will need for my user authorization setup, but my case is a bit different than just assigning roles or permissions to a user. I currently have a companies table and ...
4
votes
1answer
473 views

How to prevent sysadmin server role from executing a stored procedure

I have a SQL Server default instance using SQL Server Authentication and two users, User1 and User2. User1 has the public server role while User2 has the public server role + sysadmin server role. ...
0
votes
1answer
16 views

Error when assigning a role to user

I have created a role called "role1" with these steps : postgres=# CREATE ROLE role1; CREATE ROLE postgres=# GRANT CONNECT ON DATABASE paybills TO role1; GRANT postgres=# \c paybills You are now ...
1
vote
1answer
71 views

How to grant SQL Agent proxy to a public role in MSSQL 2014

I want to grant SQL Agent proxy to a public role in msdb database in MSSQL 2014. I have the following query and I want this to return me some valid output. USE [msdb] SELECT sp.name AS proxyname ...
0
votes
1answer
21 views

postgres database with multiple database object owners and pg_dump

with a postgres 11.2 database with multiple database object owners and trying to use the following command as the database owner (not the postgres superuser): pg_dump -h hostname -p 5432 -U ...
0
votes
1answer
70 views

Set up a postgres database with a specific role without password prompt

Context I have a PostgreSQL server (localhost:5432) which holds a database called my_database. I have created long time ago, a simple role which owns this database; my_user, different from the ...
0
votes
1answer
44 views

Database level access in Azure SQL managed instance

In my Azure SQL managed instance I have two databases, Database_A and Database_B. User A_ABC has access only to Database_A and he is part of role db_owner. When the tries to alter a table we are ...
2
votes
5answers
357 views

Granting a user a permission to restore a database

In a database I created a user with the following roles: Server Roles public Database roles db_backupoperator db_ddladmin db_datareader db_datawriter The problem is I don't want to change the ...
0
votes
0answers
14 views

Postgres permission for new objects [duplicate]

Postgres version: 11 I've got 2 roles - one used for read and one for write on the same database. CREATE ROLE reader WITH login; CREATE ROLE writer WITH login; CREATE DATABASE thedatabase; GRANT ...
2
votes
1answer
1k views

Postgres get function owner

I would like to be able to get a table of function names and function owner names. Currently, this query returns a list of functions for a given schema: SELECT proname FROM pg_catalog....
0
votes
1answer
28 views

Why do databases in mongodb have roles?

I have read about mongodb role based access control and I have understood it to a large extent. I was going through this tutorial and when you run show roles on the mongo shell it returns a different ...
1
vote
1answer
38 views

What are the real life uses of role based authentication control in a database? [closed]

I am new to database management. I was going through the mongodb docs for Role Based Authentication Control. I have understood how it works, but I have a few questions. How is it applied in real life ...
2
votes
1answer
121 views

db_datawriter vs grant delete, update, insert

I have an application set up in which the service account uses a user defined role which has each object in the database defined with specific permissions. It seems that every table in the database is ...
-1
votes
2answers
88 views

Sql Server roles [closed]

Recently I was asked question - what is the difference between Standard Server roles and Fixed server roles. I know Fixed Server roles include: Sysadmin, Securityadmin, etc. I am not sure about ...
2
votes
1answer
430 views

How to force a sysadmin to store data in schema other than dbo? [duplicate]

I am using a GUI tool to upload data in my SQL Server 2016 database. The user being used for above task has been granted sysadmin permission I created a dedicated schema to store above data. This ...
0
votes
1answer
94 views

Secure postgres 9.5 database packed on Windows desktop application

My desktop app includes a postgres database and a front app. I need the db to be accessed only by my front app. The credentials of this user are going to reside in the front app binaries. I realized ...
0
votes
1answer
68 views

Can a role be granted roles+privileges in oracle all at the same time?

I know that you can grant a role: Other roles System privileges Object privileges But, can you grant to the same role all at once? I mean, for example you grant a role: 2 roles 1 system ...
1
vote
1answer
79 views

SQL server database Role management - Azure SQL MI

In my database I have multiple users with SQL server authentication login and AD login. For ex: User 1 and user 2 are from same team(ABC), if I create a role db_abc User 1 needs read access to table ...
0
votes
1answer
147 views

How to deny a user to access (select, insert, delete, update) to tables but grant (select) a few

i am trying to deny a user to access (select, insert, delete, update) to tables on my database but i also need him to grant only select to a few tables, to do this i created a user with login and gave ...
1
vote
1answer
101 views

User is in multiple Active Directory groups with multiple roles in database

I have a user that is a member of multiple Active Directory (AD) groups. Within SQL Server 2012, these AD groups have been assigned to different database roles. This user is not getting the correct ...
0
votes
0answers
84 views

How to grant a group to another group in Redshift

I am trying to build a matrix of roles to dynamically change priorities for our users. In other database I would be doing something like: create role role1; create role role2; grant role role1 to ...
2
votes
1answer
188 views

Is it safe to delete the default “postgres” role?

I'm trying to understand if it's okay for me drop the "postgres" role, or at the least, remove it as the superuser. Thanks!
3
votes
0answers
96 views

Error in ALTER DEFAULT PRIVILEGES

I'm trying to create a new user in AWS Aurora Postgres DB. Create user worked fine and I can login to the DB using that account. granting permissions to it isn't. First: GRANT ALL on ALL tables in ...
1
vote
0answers
45 views

If a Login is not granted the db_ddladmin role on a database, but is individually granted CREATE VIEW on it, will they still be denied?

Since SQL Server permissions work as "deny first", I was wondering if that applies downward to individual permissions that are granted, if the parent permission isn't granted e.g. db_ddladmin is not ...
0
votes
0answers
32 views

Listener on database creation for PostgreSQL

I'm trying to achieve a set of functions/triggers to define database (catalog) level read-only role for every database created. The way I thought of doing this is to create a listener (trigger/event ...
0
votes
1answer
38 views

Why is MongoDB user with the only privilege as “find” able to insert and update collection?

I want my user to have only find action privilege on a specific collection. However, when I create the user with the privilege, restart the mongod server and run the mongo shell again with -u -p and --...
0
votes
0answers
430 views

Verify if user has replication permissions in Postgres

I am working on streaming changes in my Postgres database using Debezium using the Postgres connector offered by Postgres. However, for the connector to work, the user must have REPLICATION and LOGIN ...
3
votes
2answers
45 views

How can I determine which permissions needs to be assigned to the newly created login?

We have 4 databases which contain different procedures and functions. Till now the actual application can access the database using only the sa account, now I would like to change the app to use ...
0
votes
2answers
30 views

Postgresql - roles without linux accounts?

Basic question: what I'm reading describes how to create linux users in parallel with postgresql roles. However, I don't see the value in creating any of these users in linux - I just want to create ...
2
votes
2answers
81 views

How to find out all the permissions that belong to a specific server/ database role in SQL Server? [duplicate]

I can separately query all the server or database level permissions, but I want to know other thing. What server role do the given permissions exactly belong to? For example I want to see all the ...
0
votes
0answers
203 views

Can I get pg_dump to simplify the ACL commands?

When using pg_dump with a database with non-default schema foo like so: pg_dump --schema-only --schema='foo' -U myuser -d mydb -h myhost -W > mydb.sql The SQL dump file is full of these seemingly ...
0
votes
1answer
42 views

MySQL 8 roles - I'm probably missing something obvious

I'm trying to use roles in MySQL 8, and failing. I have read the documentation and as far as I can tell, I'm doing it right. Since this is a 'hello world' level attempt, I assume I'm missing something ...
1
vote
0answers
44 views

SQL Server Permissions for Intellisense for an Active Directory User? [duplicate]

I have created an Active Directory Group and created it as a user, we'll call it "AD SQL", in my DB. I can successfully login in using Active Directory Authentication and read/write. However, ...
0
votes
1answer
17 views

Details about existing roles and users in azure sql database

I would like to get details of all users existing in a sql server DB and the respective roles they are part of and the permissions granted/denied for the a role/user. what is the best way to get this ...
0
votes
1answer
835 views

How to grant permissions to database but restrict to certain schemas?

I am new to database administration and work within a small team of data analysts trying to modernise. We have recently set up an Azure SQL DB server we are accessing using SQL Server Management ...
2
votes
1answer
675 views

Naming Convention for Login, User and Roles? [closed]

What are the Naming Conventions for a Login, A database User and a Database role? Is there any best practice to follow?

1
2 3 4 5