Questions tagged [role]

A set of permissions.

Filter by
Sorted by
Tagged with
1
vote
1answer
49 views

Give a user access to restore a database that they are owner on without the server role dbcreator

A outside vendor has a SQL user with db_owner rights on two databases, live and training. From time to time they would like to be able to backup live and restore on top of training. The easiest ...
0
votes
0answers
11 views

“Friendly” role name since Azure PostgreSQL connection via AD security group role requires the AD group name as the username@pgservername?

With PostgreSQL's use of the rolename@pgservername and AD auth requiring the security group name as the role name, any user connecting via AD must know their AD security group name. I'd like to user ...
0
votes
1answer
30 views

How to add a login to the dbcreator role?

Using SSMS, I'm having trouble adding a new login to the server dbcreator role on my Azure SQL instance. Here's the syntax I'm using: CREATE LOGIN test WITH PASSWORD = 'SuperSecret!' ALTER SERVER ROLE ...
1
vote
1answer
94 views

row level security using roles in SQL Server

I would like to implement row level security on all of my tables. Each table has a column named data_classification that has a list of values. Ideally I would like to create database roles which are ...
0
votes
0answers
46 views

Create multi-user database schema with roles, permissions, and services

I am in the process of designing a user administration database and I am stuck in the creation of the tables and their relationships, in order to explain myself below I expose the requirements of the ...
1
vote
0answers
19 views

Azure SQL custom backup role

We are currently running an Elastic Pool within azure to host all our databases. We need to back up these to on-premise as well in case of an emergency, and for it we are trying to use sqlpackage. Now ...
1
vote
0answers
18 views

Create a specific role in a replicated AZURE SQL database, which is in read mode

Can you give me some help with my Azure Sql, I am having a difficulty with assigning a new role to a database with "geo-redundancy". My current structure is: BD1 in zone_A replicated to ...
0
votes
2answers
26 views

ALTER ROLE on replica

I have a primary server, with a secondary replicating it. I want to change a role from LOGIN to NOLOGIN. I can do this easily on the primary, but the change doesn't replicate to the secondary, and I ...
0
votes
1answer
51 views

Drop role postgresql

I just inherited an AWS RDS PostgreSQL 12.5 instance (so, no superuser access) and I'm required to do some cleanup and delete a bunch of groups/roles/users. I'm executing the following commands with ...
0
votes
1answer
58 views

Can't create schema for a db with PostgreSQL

Use psql -U postgres to login. postgres=> CREATE DATABASE mydb; postgres=> \c mydb; You are now connected to database "mydb" as user "postgres". When create schema, got ...
1
vote
2answers
66 views

Create a view in a user database that can access selected system database tables

Using the principle of least privilege, what access should I give to a Role "Checklist_role" that has read permission to a view "MaintenanceJobs_view" in a user database "...
0
votes
1answer
66 views

Postgres 13 - Grant to Active Directory Groups?

Is it possible to grant an AD group in PG 13 without sorting to creating the group in the database? Similar to how AD groups can be granted directly in SQL Server. The PG server is on a Windows server ...
0
votes
0answers
24 views

Create non-sysdba user that can grant tablespace to other users

I am creating an Oracle role with Admin option Grants so that user with this role assigned, will not be a full sysdba but will be able to create other users and grant them permissions. What I ...
0
votes
0answers
31 views

How can I manage newly created tables permissions in the PostgreSQL? [duplicate]

I want to create default permissions on the schema and automatically assign these permissions to newly created tables. For this purpose, I've created a role and assign a user. Afterward, I've created ...
2
votes
1answer
95 views

Adding AD Security group to a SQL linked server

I have a question about adding permissions for a user group on a linked server in SQL Server. I am not a security specialist, so I appeal to everyone. Here is the topo: I have private software that I'...
0
votes
2answers
68 views

Possible to disable THE postgres role?

Postgresql 9.6, if it matters. We have an audit finding which says that the "postgres" role must not be used at all. After creating a new SUPERUSER role, is it possible to disable role "...
0
votes
1answer
28 views

Can I GRANT SELECT on all schemas in a database?

I need to create role users of which can only read (select) data. I can do it for a particular schema. But I need it to work with all existing and future schemas (existing at least). How can I do it? ...
1
vote
0answers
98 views

Cannot use the special principal 'dbo' when addressing SQLMI risk VA2108

We've just set up a new SQL Managed Instance on Azure, and have restored a database to it for testing. After running an initial Azure Vulnerability Assessment, the results include this: VA2108 - ...
0
votes
1answer
18 views

Postgres view role permissions

I am trying to work out how database roles work. Here is my user case... create role user1 login password 'user1'; create schema authorization user1; CREATE ROLE DEV_ROLE; grant connect, temporary ...
0
votes
1answer
20 views

User cannot select from table when having SELECT permissions if CONTROL is denied

I'm setting up my database on an Azure SQL Server instance. (I know the principal names are terrible, it's just a dry run test) I created a login ("Test"), a user ("Test"), a ...
-1
votes
1answer
30 views

Allow users to restore prior days DB to view [closed]

Our application backs up DB at end of day to save End Of Day picture. We need to allow users ( Windows domain users) to restore these prior days backups using our app. This needs to done through a ...
2
votes
1answer
24 views

Should roles without login have the connect permission on a database?

I want to create a read-only role in PostgreSQL and use it to assign it to multiple new users, who should have read-only access. It makes sense to me to also grant the read-only permissions to the ...
2
votes
1answer
111 views

Allow user to GRANT certain permissions to others

I have tried googling this but may well be using the wrong terms... permissions and the like aren't my strong point. What I want to do is first create a role - eg 'Snr_Analyst' - with certain ...
0
votes
1answer
12 views

How to structure MySQL database tables for users and how to handle adding/removing permissions?

I am making a database structure for users, who can become part of a group, and within that group the admin of the group can assign as many permissions to a user as they would like. This part seems ...
-1
votes
1answer
40 views

Availability Group is not failovering when a cluster core resource is failedover

I have created always on availability group.The cluster core resources failover is happening. The availability group (Automatic) failover is happening. But, when the cluster core resource is failed ...
0
votes
1answer
52 views

Deny DDL_ADMIN permissions to a role on [dbo] schema

I have several database schemas like, [ext],[stag],etc and of course the built in [dbo] schema, and also have a role called [MyRole]. My plan is to add [MyRole] to the DDL_ADMIN role, so they can ...
0
votes
0answers
36 views

Why isn't “DROP OWNED BY” freeing up my ability to drop a role?

I'm using Postgres 9.6 on Mac. I would like to drop a user/role. I logged in as my super user (postgres) and tried this postgres=# DROP ROLE chicommons; ERROR: role "chicommons" cannot be ...
0
votes
1answer
259 views

Why availability group resource goes offline in WSFC?

Sometimes I find the AG Cluster role in offline state which results the AG in resolving state. It doesn't allow the application to access the databases during this time. And then after sometime it ...
0
votes
1answer
43 views

Can't create view using a role

I am learning Oracle and have to do roles. I created an c##admin from a sys, granted him all grants. Then I created a c##manager_role and c##manager. I granted this role to c##manager. After that I ...
0
votes
1answer
45 views

GRANT ROLE TO USER in MySQL

I created one role QI_RO, granted all privileges on all schemas on the server and I was trying to grant role privilege to another user but throwing error. GRANT QI_RO to test_user@'%'; Error Message: ...
0
votes
0answers
15 views

SQL Group Execution Rights to Read only SPs and functions - By not changing objects' schemas

We have a SQL Developer Group.. We want to give them access to execute functions and sps but not to any that amends data in any way.. We currently only have the DBO schema and all objects sits on that ...
0
votes
1answer
57 views

Postgres default privileges do not seem to work

I am trying to set up RBAC in Postgres where I have a database and a schema. I have a few roles provisioner, service, mydb_ro, and mydb_rw. I ran the following to change default privileges ALTER ...
1
vote
1answer
153 views

Do I need GRANT for INSERT to table If has EXECUTION GRANT for procedure?

I have five domain users and five roles in my database. GRANT EXECUTE adds to the appropriate roles. Roles are included in other roles, i.e. at most we have one role that has grants for two procedures,...
0
votes
0answers
500 views

Best practice privileges and roles for postgres schema migration

I'm having a re-look at roles and privileges in postgres to minimise the damage that a compromised account can do. Ownership and migrations is a part I'm having trouble getting my head around. As I ...
0
votes
1answer
346 views

Postgres role does not inherit permissions from its member role

I want to group my postgres database permissions to set of roles and then assign users to these parent roles to manage all permissions from a central place. I created a role called admins and granted ...
0
votes
2answers
21 views

Creating roles and granting rights to the role

I wanted to create a role called "user_updates" and this role should have the rights "table_note_updates". The rights called "table_note_updates" is already available in ...
-1
votes
1answer
676 views

how to resolve the error “ADMIN option not granted for role 'my_role_1'” [closed]

I am trying to grant a role to user. grant my_role_1 to ktest1 with admin option; But i am getting the below error Error report - ORA-01932: ADMIN option not granted for role 'my_role_1' 01932. 00000 ...
0
votes
1answer
100 views

How to copy user rights and roles from one user to another

I require a PL/SQL script that copies all of a user's rights, roles and mandates from one user to another. I am using Oracle 12c.
1
vote
2answers
260 views

Can't alter database roles on a restored database

My SSMS Login (using an AD group) is allocated all server roles apart from sysadmin so I have quite a lot of access. Using this Login, I have restored a database from its .bak file. However, my Login ...
0
votes
1answer
76 views

Alter default privileges in postgres for other roles

Let's say I have a role called user1, user2 and postgres. Is it possible to alter the default privileges while logged in as postgres for objects created by user1 so that user2 can see them? This is ...
1
vote
2answers
378 views

How to grant permissions to allow anything inside a SQL Server schema?

I have a schema called training. I have a new role called training_modify. Here are the desired permissions for users placed in that role: Select, update, insert, and delete permissions on any object ...
1
vote
1answer
670 views

SQL Server Grant CRUD to Users on One Schema

I have a schema called training. I want users who will be trained to have CRUD permissions on any object on that schema. I do not want them to have any other permissions on any other object outside ...
1
vote
1answer
304 views

Postgres role does not inherit permissions of superuser role via membership in that role

In the snippet below, the role writer is a member of a superuser role named admin. The admin role can insert rows into a table but the writer role cannot insert rows into the same table. Why does the ...
4
votes
1answer
663 views

How to prevent sysadmin server role from executing a stored procedure

I have a SQL Server default instance using SQL Server Authentication and two users, User1 and User2. User1 has the public server role while User2 has the public server role + sysadmin server role. ...
0
votes
1answer
19 views

Error when assigning a role to user

I have created a role called "role1" with these steps : postgres=# CREATE ROLE role1; CREATE ROLE postgres=# GRANT CONNECT ON DATABASE paybills TO role1; GRANT postgres=# \c paybills You are now ...
1
vote
1answer
465 views

How to grant SQL Agent proxy to a public role in MSSQL 2014

I want to grant SQL Agent proxy to a public role in msdb database in MSSQL 2014. I have the following query and I want this to return me some valid output. USE [msdb] SELECT sp.name AS proxyname ...
0
votes
1answer
110 views

postgres database with multiple database object owners and pg_dump

with a postgres 11.2 database with multiple database object owners and trying to use the following command as the database owner (not the postgres superuser): pg_dump -h hostname -p 5432 -U ...
0
votes
1answer
198 views

Set up a postgres database with a specific role without password prompt

Context I have a PostgreSQL server (localhost:5432) which holds a database called my_database. I have created long time ago, a simple role which owns this database; my_user, different from the ...
0
votes
1answer
69 views

Database level access in Azure SQL managed instance

In my Azure SQL managed instance I have two databases, Database_A and Database_B. User A_ABC has access only to Database_A and he is part of role db_owner. When the tries to alter a table we are ...
2
votes
5answers
1k views

Granting a user a permission to restore a database

In a database I created a user with the following roles: Server Roles public Database roles db_backupoperator db_ddladmin db_datareader db_datawriter The problem is I don't want to change the ...

1
2 3 4 5