Post reply

server role / database role precedence question

  • April 23, 2015 at 4:06 am

    #300102

    user a is sysadmin.

    user a has public role in db x

    and nothing in db y

    which takes precedence?

    can the user do everything in all databases because he is sysadmin?

    thank you.

  • April 23, 2015 at 4:09 am

    #1792964

    A sysadmin has all rights in all databases and cannot be denied any permissions.

    Gail Shaw
    Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
    SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

    We walk in the dark places no others will enter
    We stand on the bridge and no one may pass

  • April 23, 2015 at 4:11 am

    #1792965

    Thanks Gail, I find it confusing the way you can seemingly give permissions at the database level as well for a sysadmin.

    Appreciate the swift response.

  • April 23, 2015 at 4:25 am

    #1792967

    You can give permissions at any level, if the person is removed from the sysadmin role, the other permissions granted define what he can do. Additionally, granted permissions are always cumulative

    Gail Shaw
    Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
    SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

    We walk in the dark places no others will enter
    We stand on the bridge and no one may pass

Viewing 4 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply