Questions tagged [role]

A set of permissions.

Filter by
Sorted by
Tagged with
1
vote
2answers
48 views

Create a view in a user database that can access selected system database tables

Using the principle of least privilege, what access should I give to a Role "Checklist_role" that has read permission to a view "MaintenanceJobs_view" in a user database "...
0
votes
1answer
23 views

Postgres 13 - Grant to Active Directory Groups?

Is it possible to grant an AD group in PG 13 without sorting to creating the group in the database? Similar to how AD groups can be granted directly in SQL Server. The PG server is on a Windows server ...
0
votes
0answers
18 views

Create non-sysdba user that can grant tablespace to other users

I am creating an Oracle role with Admin option Grants so that user with this role assigned, will not be a full sysdba but will be able to create other users and grant them permissions. What I ...
0
votes
0answers
12 views

How can I manage newly created tables permissions in the PostgreSQL? [duplicate]

I want to create default permissions on the schema and automatically assign these permissions to newly created tables. For this purpose, I've created a role and assign a user. Afterward, I've created ...
2
votes
1answer
25 views

Adding AD Security group to a SQL linked server

I have a question about adding permissions for a user group on a linked server in SQL Server. I am not a security specialist, so I appeal to everyone. Here is the topo: I have private software that I'...
0
votes
2answers
51 views

Possible to disable THE postgres role?

Postgresql 9.6, if it matters. We have an audit finding which says that the "postgres" role must not be used at all. After creating a new SUPERUSER role, is it possible to disable role "...
0
votes
1answer
25 views

Can I GRANT SELECT on all schemas in a database?

I need to create role users of which can only read (select) data. I can do it for a particular schema. But I need it to work with all existing and future schemas (existing at least). How can I do it? ...
0
votes
0answers
21 views

Cannot use the special principal 'dbo' when addressing SQLMI risk VA2108

We've just set up a new SQL Managed Instance on Azure, and have restored a database to it for testing. After running an initial Azure Vulnerability Assessment, the results include this: VA2108 - ...
0
votes
1answer
14 views

Postgres view role permissions

I am trying to work out how database roles work. Here is my user case... create role user1 login password 'user1'; create schema authorization user1; CREATE ROLE DEV_ROLE; grant connect, temporary ...
0
votes
1answer
18 views

User cannot select from table when having SELECT permissions if CONTROL is denied

I'm setting up my database on an Azure SQL Server instance. (I know the principal names are terrible, it's just a dry run test) I created a login ("Test"), a user ("Test"), a ...
-1
votes
1answer
30 views

Allow users to restore prior days DB to view [closed]

Our application backs up DB at end of day to save End Of Day picture. We need to allow users ( Windows domain users) to restore these prior days backups using our app. This needs to done through a ...
2
votes
1answer
22 views

Should roles without login have the connect permission on a database?

I want to create a read-only role in PostgreSQL and use it to assign it to multiple new users, who should have read-only access. It makes sense to me to also grant the read-only permissions to the ...
2
votes
1answer
108 views

Allow user to GRANT certain permissions to others

I have tried googling this but may well be using the wrong terms... permissions and the like aren't my strong point. What I want to do is first create a role - eg 'Snr_Analyst' - with certain ...
0
votes
1answer
12 views

How to structure MySQL database tables for users and how to handle adding/removing permissions?

I am making a database structure for users, who can become part of a group, and within that group the admin of the group can assign as many permissions to a user as they would like. This part seems ...
-1
votes
1answer
38 views

Availability Group is not failovering when a cluster core resource is failedover

I have created always on availability group.The cluster core resources failover is happening. The availability group (Automatic) failover is happening. But, when the cluster core resource is failed ...
0
votes
1answer
36 views

Deny DDL_ADMIN permissions to a role on [dbo] schema

I have several database schemas like, [ext],[stag],etc and of course the built in [dbo] schema, and also have a role called [MyRole]. My plan is to add [MyRole] to the DDL_ADMIN role, so they can ...
0
votes
0answers
20 views

Why isn't “DROP OWNED BY” freeing up my ability to drop a role?

I'm using Postgres 9.6 on Mac. I would like to drop a user/role. I logged in as my super user (postgres) and tried this postgres=# DROP ROLE chicommons; ERROR: role "chicommons" cannot be ...
0
votes
1answer
158 views

Why availability group resource goes offline in WSFC?

Sometimes I find the AG Cluster role in offline state which results the AG in resolving state. It doesn't allow the application to access the databases during this time. And then after sometime it ...
0
votes
1answer
31 views

Can't create view using a role

I am learning Oracle and have to do roles. I created an c##admin from a sys, granted him all grants. Then I created a c##manager_role and c##manager. I granted this role to c##manager. After that I ...
0
votes
1answer
35 views

GRANT ROLE TO USER in MySQL

I created one role QI_RO, granted all privileges on all schemas on the server and I was trying to grant role privilege to another user but throwing error. GRANT QI_RO to test_user@'%'; Error Message: ...
0
votes
0answers
14 views

SQL Group Execution Rights to Read only SPs and functions - By not changing objects' schemas

We have a SQL Developer Group.. We want to give them access to execute functions and sps but not to any that amends data in any way.. We currently only have the DBO schema and all objects sits on that ...
0
votes
1answer
47 views

Postgres default privileges do not seem to work

I am trying to set up RBAC in Postgres where I have a database and a schema. I have a few roles provisioner, service, mydb_ro, and mydb_rw. I ran the following to change default privileges ALTER ...
1
vote
1answer
73 views

Do I need GRANT for INSERT to table If has EXECUTION GRANT for procedure?

I have five domain users and five roles in my database. GRANT EXECUTE adds to the appropriate roles. Roles are included in other roles, i.e. at most we have one role that has grants for two procedures,...
0
votes
0answers
364 views

Best practice privileges and roles for postgres schema migration

I'm having a re-look at roles and privileges in postgres to minimise the damage that a compromised account can do. Ownership and migrations is a part I'm having trouble getting my head around. As I ...
0
votes
1answer
238 views

Postgres role does not inherit permissions from its member role

I want to group my postgres database permissions to set of roles and then assign users to these parent roles to manage all permissions from a central place. I created a role called admins and granted ...
0
votes
2answers
21 views

Creating roles and granting rights to the role

I wanted to create a role called "user_updates" and this role should have the rights "table_note_updates". The rights called "table_note_updates" is already available in ...
-1
votes
1answer
280 views

how to resolve the error “ADMIN option not granted for role 'my_role_1'” [closed]

I am trying to grant a role to user. grant my_role_1 to ktest1 with admin option; But i am getting the below error Error report - ORA-01932: ADMIN option not granted for role 'my_role_1' 01932. 00000 ...
0
votes
0answers
120 views

Best way to clone a user in Postgresql?

I need to create a clone of a database owner. I I have the following script: create role oclone with password 'xxx' LOGIN INHERIT CREATEDB CREATEROLE; grant dbowner to oclone; alter role oclone set ...
0
votes
1answer
79 views

How to copy user rights and roles from one user to another

I require a PL/SQL script that copies all of a user's rights, roles and mandates from one user to another. I am using Oracle 12c.
1
vote
2answers
153 views

Can't alter database roles on a restored database

My SSMS Login (using an AD group) is allocated all server roles apart from sysadmin so I have quite a lot of access. Using this Login, I have restored a database from its .bak file. However, my Login ...
0
votes
1answer
49 views

Alter default privileges in postgres for other roles

Let's say I have a role called user1, user2 and postgres. Is it possible to alter the default privileges while logged in as postgres for objects created by user1 so that user2 can see them? This is ...
1
vote
2answers
194 views

How to grant permissions to allow anything inside a SQL Server schema?

I have a schema called training. I have a new role called training_modify. Here are the desired permissions for users placed in that role: Select, update, insert, and delete permissions on any object ...
1
vote
1answer
501 views

SQL Server Grant CRUD to Users on One Schema

I have a schema called training. I want users who will be trained to have CRUD permissions on any object on that schema. I do not want them to have any other permissions on any other object outside ...
1
vote
1answer
175 views

Postgres role does not inherit permissions of superuser role via membership in that role

In the snippet below, the role writer is a member of a superuser role named admin. The admin role can insert rows into a table but the writer role cannot insert rows into the same table. Why does the ...
4
votes
1answer
604 views

How to prevent sysadmin server role from executing a stored procedure

I have a SQL Server default instance using SQL Server Authentication and two users, User1 and User2. User1 has the public server role while User2 has the public server role + sysadmin server role. ...
0
votes
1answer
18 views

Error when assigning a role to user

I have created a role called "role1" with these steps : postgres=# CREATE ROLE role1; CREATE ROLE postgres=# GRANT CONNECT ON DATABASE paybills TO role1; GRANT postgres=# \c paybills You are now ...
1
vote
1answer
331 views

How to grant SQL Agent proxy to a public role in MSSQL 2014

I want to grant SQL Agent proxy to a public role in msdb database in MSSQL 2014. I have the following query and I want this to return me some valid output. USE [msdb] SELECT sp.name AS proxyname ...
0
votes
1answer
69 views

postgres database with multiple database object owners and pg_dump

with a postgres 11.2 database with multiple database object owners and trying to use the following command as the database owner (not the postgres superuser): pg_dump -h hostname -p 5432 -U ...
0
votes
1answer
158 views

Set up a postgres database with a specific role without password prompt

Context I have a PostgreSQL server (localhost:5432) which holds a database called my_database. I have created long time ago, a simple role which owns this database; my_user, different from the ...
0
votes
1answer
65 views

Database level access in Azure SQL managed instance

In my Azure SQL managed instance I have two databases, Database_A and Database_B. User A_ABC has access only to Database_A and he is part of role db_owner. When the tries to alter a table we are ...
2
votes
5answers
956 views

Granting a user a permission to restore a database

In a database I created a user with the following roles: Server Roles public Database roles db_backupoperator db_ddladmin db_datareader db_datawriter The problem is I don't want to change the ...
0
votes
0answers
14 views

Postgres permission for new objects [duplicate]

Postgres version: 11 I've got 2 roles - one used for read and one for write on the same database. CREATE ROLE reader WITH login; CREATE ROLE writer WITH login; CREATE DATABASE thedatabase; GRANT ...
4
votes
1answer
4k views

Postgres get function owner

I would like to be able to get a table of function names and function owner names. Currently, this query returns a list of functions for a given schema: SELECT proname FROM pg_catalog....
0
votes
1answer
35 views

Why do databases in mongodb have roles?

I have read about mongodb role based access control and I have understood it to a large extent. I was going through this tutorial and when you run show roles on the mongo shell it returns a different ...
1
vote
1answer
39 views

What are the real life uses of role based authentication control in a database? [closed]

I am new to database management. I was going through the mongodb docs for Role Based Authentication Control. I have understood how it works, but I have a few questions. How is it applied in real life ...
2
votes
1answer
287 views

db_datawriter vs grant delete, update, insert

I have an application set up in which the service account uses a user defined role which has each object in the database defined with specific permissions. It seems that every table in the database is ...
-1
votes
2answers
123 views

Sql Server roles [closed]

Recently I was asked question - what is the difference between Standard Server roles and Fixed server roles. I know Fixed Server roles include: Sysadmin, Securityadmin, etc. I am not sure about ...
2
votes
1answer
454 views

How to force a sysadmin to store data in schema other than dbo? [duplicate]

I am using a GUI tool to upload data in my SQL Server 2016 database. The user being used for above task has been granted sysadmin permission I created a dedicated schema to store above data. This ...
0
votes
1answer
100 views

Secure postgres 9.5 database packed on Windows desktop application

My desktop app includes a postgres database and a front app. I need the db to be accessed only by my front app. The credentials of this user are going to reside in the front app binaries. I realized ...
0
votes
1answer
87 views

Can a role be granted roles+privileges in oracle all at the same time?

I know that you can grant a role: Other roles System privileges Object privileges But, can you grant to the same role all at once? I mean, for example you grant a role: 2 roles 1 system ...

1
2 3 4 5