April 9, 2009 at 6:48 am
If I have ddl_admin fixed role do i still need to have reader and Writer role also and if I had Writer role do i still need to have Reader role too. Actually My windows id was assigned to all these 3 roles but i wonder do i need to have them instead i think i can just be ddl_admin role that gives me writer and reader previlages also.
April 9, 2009 at 7:51 am
Nope, it doesn't work that way. From BOL
db_ddladmin
Members of the db_ddladmin fixed database role can run any Data Definition Language (DDL) command in a database.
db_datawriter
Members of the db_datawriter fixed database role can add, delete, or change data in all user tables.
db_datareader
Members of the db_datareader fixed database role can read all data from all user tables.
April 9, 2009 at 7:59 am
That is correct, you will need read and write role membership to be able to read and write data and ddladmin role membership to be able to create / alter objects.
Unlike the server roles, the database roles don't build on the permissions of each other.
April 9, 2009 at 10:27 am
Thank you guys.. it was my mis understnding.
Viewing 4 posts - 1 through 3 (of 3 total)
You must be logged in to reply to this topic. Login to reply