Questions tagged [role]

A set of permissions.

Filter by
Sorted by
Tagged with
0
votes
1answer
10 views

Postgres view role permissions

I am trying to work out how database roles work. Here is my user case... create role user1 login password 'user1'; create schema authorization user1; CREATE ROLE DEV_ROLE; grant connect, temporary ...
0
votes
1answer
17 views

User cannot select from table when having SELECT permissions if CONTROL is denied

I'm setting up my database on an Azure SQL Server instance. (I know the principal names are terrible, it's just a dry run test) I created a login ("Test"), a user ("Test"), a ...
-1
votes
1answer
30 views

Allow users to restore prior days DB to view [closed]

Our application backs up DB at end of day to save End Of Day picture. We need to allow users ( Windows domain users) to restore these prior days backups using our app. This needs to done through a ...
2
votes
1answer
20 views

Should roles without login have the connect permission on a database?

I want to create a read-only role in PostgreSQL and use it to assign it to multiple new users, who should have read-only access. It makes sense to me to also grant the read-only permissions to the ...
2
votes
1answer
106 views

Allow user to GRANT certain permissions to others

I have tried googling this but may well be using the wrong terms... permissions and the like aren't my strong point. What I want to do is first create a role - eg 'Snr_Analyst' - with certain ...
0
votes
1answer
12 views

How to structure MySQL database tables for users and how to handle adding/removing permissions?

I am making a database structure for users, who can become part of a group, and within that group the admin of the group can assign as many permissions to a user as they would like. This part seems ...
-1
votes
1answer
38 views

Availability Group is not failovering when a cluster core resource is failedover

I have created always on availability group.The cluster core resources failover is happening. The availability group (Automatic) failover is happening. But, when the cluster core resource is failed ...
0
votes
1answer
35 views

Deny DDL_ADMIN permissions to a role on [dbo] schema

I have several database schemas like, [ext],[stag],etc and of course the built in [dbo] schema, and also have a role called [MyRole]. My plan is to add [MyRole] to the DDL_ADMIN role, so they can ...
0
votes
0answers
19 views

Why isn't “DROP OWNED BY” freeing up my ability to drop a role?

I'm using Postgres 9.6 on Mac. I would like to drop a user/role. I logged in as my super user (postgres) and tried this postgres=# DROP ROLE chicommons; ERROR: role "chicommons" cannot be ...
0
votes
1answer
136 views

Why availability group resource goes offline in WSFC?

Sometimes I find the AG Cluster role in offline state which results the AG in resolving state. It doesn't allow the application to access the databases during this time. And then after sometime it ...
0
votes
1answer
27 views

Can't create view using a role

I am learning Oracle and have to do roles. I created an c##admin from a sys, granted him all grants. Then I created a c##manager_role and c##manager. I granted this role to c##manager. After that I ...
0
votes
1answer
29 views

GRANT ROLE TO USER in MySQL

I created one role QI_RO, granted all privileges on all schemas on the server and I was trying to grant role privilege to another user but throwing error. GRANT QI_RO to test_user@'%'; Error Message: ...
0
votes
0answers
14 views

SQL Group Execution Rights to Read only SPs and functions - By not changing objects' schemas

We have a SQL Developer Group.. We want to give them access to execute functions and sps but not to any that amends data in any way.. We currently only have the DBO schema and all objects sits on that ...
0
votes
1answer
45 views

Postgres default privileges do not seem to work

I am trying to set up RBAC in Postgres where I have a database and a schema. I have a few roles provisioner, service, mydb_ro, and mydb_rw. I ran the following to change default privileges ALTER ...
1
vote
1answer
64 views

Do I need GRANT for INSERT to table If has EXECUTION GRANT for procedure?

I have five domain users and five roles in my database. GRANT EXECUTE adds to the appropriate roles. Roles are included in other roles, i.e. at most we have one role that has grants for two procedures,...
0
votes
0answers
314 views

Best practice privileges and roles for postgres schema migration

I'm having a re-look at roles and privileges in postgres to minimise the damage that a compromised account can do. Ownership and migrations is a part I'm having trouble getting my head around. As I ...
0
votes
1answer
203 views

Postgres role does not inherit permissions from its member role

I want to group my postgres database permissions to set of roles and then assign users to these parent roles to manage all permissions from a central place. I created a role called admins and granted ...
0
votes
2answers
21 views

Creating roles and granting rights to the role

I wanted to create a role called "user_updates" and this role should have the rights "table_note_updates". The rights called "table_note_updates" is already available in ...
-1
votes
1answer
231 views

how to resolve the error “ADMIN option not granted for role 'my_role_1'” [closed]

I am trying to grant a role to user. grant my_role_1 to ktest1 with admin option; But i am getting the below error Error report - ORA-01932: ADMIN option not granted for role 'my_role_1' 01932. 00000 ...
0
votes
0answers
107 views

Best way to clone a user in Postgresql?

I need to create a clone of a database owner. I I have the following script: create role oclone with password 'xxx' LOGIN INHERIT CREATEDB CREATEROLE; grant dbowner to oclone; alter role oclone set ...
0
votes
1answer
71 views

How to copy user rights and roles from one user to another

I require a PL/SQL script that copies all of a user's rights, roles and mandates from one user to another. I am using Oracle 12c.
1
vote
2answers
128 views

Can't alter database roles on a restored database

My SSMS Login (using an AD group) is allocated all server roles apart from sysadmin so I have quite a lot of access. Using this Login, I have restored a database from its .bak file. However, my Login ...
0
votes
1answer
45 views

Alter default privileges in postgres for other roles

Let's say I have a role called user1, user2 and postgres. Is it possible to alter the default privileges while logged in as postgres for objects created by user1 so that user2 can see them? This is ...
1
vote
2answers
176 views

How to grant permissions to allow anything inside a SQL Server schema?

I have a schema called training. I have a new role called training_modify. Here are the desired permissions for users placed in that role: Select, update, insert, and delete permissions on any object ...
1
vote
1answer
458 views

SQL Server Grant CRUD to Users on One Schema

I have a schema called training. I want users who will be trained to have CRUD permissions on any object on that schema. I do not want them to have any other permissions on any other object outside ...
1
vote
1answer
160 views

Postgres role does not inherit permissions of superuser role via membership in that role

In the snippet below, the role writer is a member of a superuser role named admin. The admin role can insert rows into a table but the writer role cannot insert rows into the same table. Why does the ...
0
votes
0answers
17 views

How to create a better Role-Based Access Control with customizable permissions?

I am trying to layout the tables I will need for my user authorization setup, but my case is a bit different than just assigning roles or permissions to a user. I currently have a companies table and ...
4
votes
1answer
586 views

How to prevent sysadmin server role from executing a stored procedure

I have a SQL Server default instance using SQL Server Authentication and two users, User1 and User2. User1 has the public server role while User2 has the public server role + sysadmin server role. ...
0
votes
1answer
18 views

Error when assigning a role to user

I have created a role called "role1" with these steps : postgres=# CREATE ROLE role1; CREATE ROLE postgres=# GRANT CONNECT ON DATABASE paybills TO role1; GRANT postgres=# \c paybills You are now ...
1
vote
1answer
310 views

How to grant SQL Agent proxy to a public role in MSSQL 2014

I want to grant SQL Agent proxy to a public role in msdb database in MSSQL 2014. I have the following query and I want this to return me some valid output. USE [msdb] SELECT sp.name AS proxyname ...
0
votes
1answer
58 views

postgres database with multiple database object owners and pg_dump

with a postgres 11.2 database with multiple database object owners and trying to use the following command as the database owner (not the postgres superuser): pg_dump -h hostname -p 5432 -U ...
0
votes
1answer
149 views

Set up a postgres database with a specific role without password prompt

Context I have a PostgreSQL server (localhost:5432) which holds a database called my_database. I have created long time ago, a simple role which owns this database; my_user, different from the ...
0
votes
1answer
63 views

Database level access in Azure SQL managed instance

In my Azure SQL managed instance I have two databases, Database_A and Database_B. User A_ABC has access only to Database_A and he is part of role db_owner. When the tries to alter a table we are ...
2
votes
5answers
874 views

Granting a user a permission to restore a database

In a database I created a user with the following roles: Server Roles public Database roles db_backupoperator db_ddladmin db_datareader db_datawriter The problem is I don't want to change the ...
0
votes
0answers
14 views

Postgres permission for new objects [duplicate]

Postgres version: 11 I've got 2 roles - one used for read and one for write on the same database. CREATE ROLE reader WITH login; CREATE ROLE writer WITH login; CREATE DATABASE thedatabase; GRANT ...
4
votes
1answer
4k views

Postgres get function owner

I would like to be able to get a table of function names and function owner names. Currently, this query returns a list of functions for a given schema: SELECT proname FROM pg_catalog....
0
votes
1answer
34 views

Why do databases in mongodb have roles?

I have read about mongodb role based access control and I have understood it to a large extent. I was going through this tutorial and when you run show roles on the mongo shell it returns a different ...
1
vote
1answer
39 views

What are the real life uses of role based authentication control in a database? [closed]

I am new to database management. I was going through the mongodb docs for Role Based Authentication Control. I have understood how it works, but I have a few questions. How is it applied in real life ...
2
votes
1answer
260 views

db_datawriter vs grant delete, update, insert

I have an application set up in which the service account uses a user defined role which has each object in the database defined with specific permissions. It seems that every table in the database is ...
-1
votes
2answers
120 views

Sql Server roles [closed]

Recently I was asked question - what is the difference between Standard Server roles and Fixed server roles. I know Fixed Server roles include: Sysadmin, Securityadmin, etc. I am not sure about ...
2
votes
1answer
452 views

How to force a sysadmin to store data in schema other than dbo? [duplicate]

I am using a GUI tool to upload data in my SQL Server 2016 database. The user being used for above task has been granted sysadmin permission I created a dedicated schema to store above data. This ...
0
votes
1answer
99 views

Secure postgres 9.5 database packed on Windows desktop application

My desktop app includes a postgres database and a front app. I need the db to be accessed only by my front app. The credentials of this user are going to reside in the front app binaries. I realized ...
0
votes
1answer
86 views

Can a role be granted roles+privileges in oracle all at the same time?

I know that you can grant a role: Other roles System privileges Object privileges But, can you grant to the same role all at once? I mean, for example you grant a role: 2 roles 1 system ...
1
vote
1answer
105 views

SQL server database Role management - Azure SQL MI

In my database I have multiple users with SQL server authentication login and AD login. For ex: User 1 and user 2 are from same team(ABC), if I create a role db_abc User 1 needs read access to table ...
0
votes
1answer
337 views

How to deny a user to access (select, insert, delete, update) to tables but grant (select) a few

i am trying to deny a user to access (select, insert, delete, update) to tables on my database but i also need him to grant only select to a few tables, to do this i created a user with login and gave ...
1
vote
1answer
336 views

User is in multiple Active Directory groups with multiple roles in database

I have a user that is a member of multiple Active Directory (AD) groups. Within SQL Server 2012, these AD groups have been assigned to different database roles. This user is not getting the correct ...
0
votes
0answers
118 views

How to grant a group to another group in Redshift

I am trying to build a matrix of roles to dynamically change priorities for our users. In other database I would be doing something like: create role role1; create role role2; grant role role1 to ...
2
votes
1answer
386 views

Is it safe to delete the default “postgres” role?

I'm trying to understand if it's okay for me drop the "postgres" role, or at the least, remove it as the superuser. Thanks!
3
votes
0answers
180 views

Error in ALTER DEFAULT PRIVILEGES

I'm trying to create a new user in AWS Aurora Postgres DB. Create user worked fine and I can login to the DB using that account. granting permissions to it isn't. First: GRANT ALL on ALL tables in ...
1
vote
0answers
59 views

If a Login is not granted the db_ddladmin role on a database, but is individually granted CREATE VIEW on it, will they still be denied?

Since SQL Server permissions work as "deny first", I was wondering if that applies downward to individual permissions that are granted, if the parent permission isn't granted e.g. db_ddladmin is not ...

1
2 3 4 5