March 4, 2014 at 10:29 pm
Hi All,
I have a created custom Database Role called Managers. This Role is member of db_owner role. I would like to remove the DROP Database and Restore Database privilege to this custom Role.
How do I do this?
Man
March 5, 2014 at 12:12 am
Probably Deny ALTER to [role] might help but then the role created won't serve the purpose that it meant to. Therefore please do not execute this....
Let us wait to hear from experts on this ...
March 5, 2014 at 9:35 am
I would recommend taking the Manager Role out of the db_owner role and manually add all the permissions needed to mimic it. You can use sp_dbfixedrolepermission and/or sys.fn_builtin_permissions to help figure out what you need to grant.
Jack Corbett
Consultant - Straight Path Solutions
Check out these links on how to get faster and more accurate answers:
Forum Etiquette: How to post data/code on a forum to get the best help
Need an Answer? Actually, No ... You Need a Question
March 6, 2014 at 5:30 am
Jack has provided ideal solution. If db Role is having db_owner surly you can't restrict Drop or Restore database. By default it can perform all db roles.
---------------------------------------------------
"Thare are only 10 types of people in the world:
Those who understand binary, and those who don't."
Viewing 4 posts - 1 through 3 (of 3 total)
You must be logged in to reply to this topic. Login to reply