Homebrew - did you find the answer to your issue? I'm facing the same thing now myself.

It is at the database level for a database user, not at the instance level for a Login. That's what has made this so difficult to resolve.

I've...

Thanks for the responses, I really appreciate it.

In this case we do need to maintain security at the database level by individual user, not group. We use groups for...

Thank you for your reply.

The issue is that my users access the server through an AD group Login. Then, to access the system, the application logs them in...

Banana - Are you still working this issue?

I'm working on something similar to what you are doing. For my implementation I want to grant users the ability...

Lowell,

You've done a much better job than I did in explaining the issue - thanks!

I'm leaning towards leaving the domain in the DB User for now. Not so much...

In our case user logins are authenticated to the instance by group membership. They access the individual DB through the app using a DB User. At the DB...

I can't help but ask about your final example using ALL. Perhaps I'm not reading it correctly (likely the case), but using the following two queries:

#1

...

Thanks for the reply!

In hacking at the problem some more after posting I found another way to do it. The UNPIVOT operator worked like a charm! I used...