Post reply

Security issue

  • March 8, 2016 at 7:01 am

    #313913

    I have a user that was set up as an admin at the server level. I need to block her access to one database on the server and leave her alone on all of the others (about 20). I have seen a role on the server named db_denydatawriter. Can I assign this role to her on that database only and allow her admin rights on all of the others?

    I am using SQL Server 2012.

  • March 8, 2016 at 7:08 am

    #1863669

    Sysadmins have access to all securable at server and database level and there is no DENY that can stop this. Simply put, no: sysadmins will always have access to everything.

    -- Gianluca Sartori

  • March 10, 2016 at 11:23 am

    #1864332

    Remove sysadmin Server Role, use User Mapping and make the user db_owner of all databases but the one you want to exclude.

Viewing 3 posts - 1 through 2 (of 2 total)

You must be logged in to reply to this topic. Login to reply