Creating Group or Role and Assigning SQL user to that group ?

  • Hi Experts,

    I have 4 Applications and 1 DB .

    From each Application nearly 20 different users being connecting to DB with different access permission's.

    for example: 1 application Read/write access to DB (20) users using SQL authentication

    2 application read access to DB (30) users using SQL authentication

    I am planing to create 4 different groups to these users

    is it possible to create group and assign this SQL users to these group ?

    Please let me know your suggestions

    Thanks

    Ichbinraj

  • you would create roles in the database, and then you can assign SQL Server logins and database users to these roles.

    You can assign these roles whatever permissions are needed.

  • Thanks for your information.

    I created on role XYZ_USERs .. just I am confused here can you explain me little more...

    I could see 40 users when I am adding to it ..

    Can I set permission to XYZ_USERs to read Write and assign just 20 users

    For Example : I will create 20 news users with just public default access . and to the XYZ_USER role side I want to set up the permission .. is it possible ?

    Role means : folder of all users those who have same access rights ? means you should have to manually create 20 users .. then keep in one folder ?

    Suppose When I create ABC_USERs Group in Local users and Groups. I can add this ABC_USERs group to SQL login and I can set up the permission read and write .. then I can add each Windows users to that group with out adding them in SQL login ?

    Thanks

    Ichbinraj

  • Each set of permissions needs a different role.

    If you need 20 people with read/write and 20 with read only, you need 2 roles.

    A user can be in multiple roles, and these are like a folder or group, but use the correct terminology in SQL Server or we won't have common ground for a discussion.

  • My Bad....

    I have created ABC group in 'local users and group' and able to set the permission's READ/Write on TEST DB, Added (mapping windows users) some windows users to that account ... In this case I am not adding any login in SQL server side

    but when it comes to a role.. I created XZY role able to add SQL login ....

    It means I can not define any security permission on xyz because we are just assigning and maintaining users those who has read/write permission under xyz role.

    And create one more role and assign all read access SQL login's to this role..

    Thanks

    Ichbinraj

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply