September 10, 2012 at 2:20 pm
One of our developers mistakenly added the db_accessadmin securable to the group DOMAIN\Utility_Users in one of our user databases. I want to delete this securable but can't seem to find a way to do that. When I try to find out who is a member of the db_accessadmin role using exec sp_helprolemember [db_accessadmin], I don't get any rows, which implies that no one in that database is a member of that role. When I to find out the group's default schema using sp_helpuser DOMAIN\Utility_Users, the DefSchemaName is Null.
All I want to do is delete this securable from the user group DOMAIN\Utility_Users. Any great ideas?
September 10, 2012 at 2:54 pm
Well I've figured it out. You have to use the REVOKE SCHEMA command. This is what I ran that deleted the db_accessadmin securable:
revoke delete on SCHEMA::db_accessadmin from \DOMAIN\UTILITYROLL_USERS
revoke EXECUTE on SCHEMA::db_accessadmin from \DOMAIN\UTILITYROLL_USERS
revoke INSERT on SCHEMA::db_accessadmin from \DOMAIN\UTILITYROLL_USERS
revoke SELECT on SCHEMA::db_accessadmin from \DOMAIN\UTILITYROLL_USERS
revoke UPDATE on SCHEMA::db_accessadmin from \DOMAIN\UTILITYROLL_USERS
Viewing 2 posts - 1 through 1 (of 1 total)
You must be logged in to reply to this topic. Login to reply