ddl_admin ?

Question

Viewing 9 posts - 1 through 8 (of 8 total)

You must be logged in to reply to this topic. Login to reply

Tara-1044200 SSCoach Points: 15951 More actions · Answer 1

SSCoach

Points: 15951

October 22, 2009 at 8:27 am

any comments

Tara-1044200 SSCoach Points: 15951 More actions · Answer 2

Users in ddl_admin role can not edit tables through design mode(GUI) but they can do using sql queries?

is this how SSMS works which we cant change?

Steve-3_5_7_9 SSChampion Points: 10832 More actions · Answer 3

Yes, both users can alter each other's objects in the same database, using DDL; but not through SSMS.

Let me clarify more. The user(s) will not be able to use the designer in SSMS but can open a TRANSACT-SQL/Query window and then run the DDL commands.

Tara-1044200 SSCoach Points: 15951 More actions · Answer 4

so user in this role can also create and drop tables using scripts ?

Steve-3_5_7_9 SSChampion Points: 10832 More actions · Answer 5

Yes, see the Books Online

Members of the db_ddladmin fixed database role can run any Data Definition Language (DDL) command in a database.

Tara-1044200 SSCoach Points: 15951 More actions · Answer 6

is there a way i can give ddl_admin but would like to restrict them from dropping any tables?

nary SSCrazy Points: 2869 More actions · Answer 7

you can create DDL Trigger to restrict any operation

K. Brian Kelley SSC Guru Points: 114642 More actions · Answer 8

Here's an example how using a DDL trigger:

K. Brian Kelley
@kbriankelley