Permissions assigned to a role and schema

  • If I create a new database role (say Developers) owned by "dbo", and then create a schema "Developers" owned by that same role, what are the permissions of a user added to the Developers role? Where\how do I add\modify role permissions? (While "dbo" may be the owner of the role I don't think that all members of that role are "dbo" equivalents because the default sql database roles, including db_datareader, are all owned by "dbo" and they don't have dbo permission.)

    TIA,

    barkingdog

    P.S. If anyone knows the sql command or a script that can tell me what permissions are associated with a (developer defined) role or schema, please enlighten me.

  • If you have not defined any permissions or assigned any securables to the role - then the user will not have any permissions.

    Just creating a role does not confer permissions - and just because the role is owned by a principal does not grant rights associated with that principal.

    Jeffrey Williams
    “We are all faced with a series of great opportunities brilliantly disguised as impossible situations.”

    ― Charles R. Swindoll

    How to post questions to get better answers faster
    Managing Transaction Logs

  • Jeffrey is correct. Ownership has nothing to do with permissions transferring. It means certain permissions are there for the owner, but means nothing for the schema or role.

  • Thanks for the info. Another question: while I can GRANT permissions to a role using t-sql, where can I do the same under SSMS?

    TIA,

    Barkingdog

  • Properties for the role, securables tab.

  • You're right Steve!

    Originally I followed this path for the fixed database roles. (I expected to see how Microsoft had setup the permisions). And there is no securable tab for them. It only works for newly created database roles.

    Barkingdog

Viewing 6 posts - 1 through 5 (of 5 total)

You must be logged in to reply to this topic. Login to reply