November 23, 2012 at 8:27 am
Hi,
How do I make the users group i.e. domainname\users to be able to only select from tableA but user1 and user2 to have full control on it?
Note that user1 and user2 are already in domainname\users
Thanks
November 23, 2012 at 10:30 am
arkiboys (11/23/2012)
Hi,How do I make the users group i.e. domainname\users to be able to only select from tableA but user1 and user2 to have full control on it?
Note that user1 and user2 are already in domainname\users
Thanks
1. Grant domainname\users select permissions on TableA.
2. Grant user1 and user2 full control on TableA OR
Create new group, add user1 and user2 into the group and grant this new group full control on
TableA.
November 23, 2012 at 10:35 am
Guru Nagabhushan (11/23/2012)
arkiboys (11/23/2012)
Hi,How do I make the users group i.e. domainname\users to be able to only select from tableA but user1 and user2 to have full control on it?
Note that user1 and user2 are already in domainname\users
Thanks
1. Grant domainname\users select permissions on TableA.
2. Grant user1 and user2 full control on TableA OR
Create new group, add user1 and user2 into the group and grant this new group full control on
TableA.
How do I create a new group? do you mean in sql server?
November 23, 2012 at 12:24 pm
You could create the new group in Windows AD or you could add the two logins to a database role and assign the permissions to the role.
November 25, 2012 at 3:51 am
Guru Nagabhushan (11/23/2012)
You could create the new group in Windows AD or you could add the two logins to a database role and assign the permissions to the role.
November 25, 2012 at 3:52 am
Guru Nagabhushan (11/23/2012)
You could create the new group in Windows AD or you could add the two logins to a database role and assign the permissions to the role.
does this work even if user1 and user2 are both in the existing users group?
November 26, 2012 at 2:10 am
Permissions are cumulative but deny's take precidence.
Now what permissions have you already granted to the existing user group?
Yes you can create another AD group for user1 and user2 then grant that the permissions you want as it will just add on the new permissions to their existing permissions.
But if you have set them a deny on a particular action, it will always deny them.
Viewing 7 posts - 1 through 6 (of 6 total)
You must be logged in to reply to this topic. Login to reply