Hi Sue

Ok so what my plan is was to create 2 domain accounts; one for the engine and one for agent and set all instances on all the database servers...

Noted Gail
I will keep the public role as is and create custom database roles and assign permissions to them accordingly
Have a good day
Kal

Hi Gail
So when i check under a database i see the following permissions given to the database public role:

These are the default...

Gail
I found this in another database:

GRANT SELECT public dbo objects USER_TABLE GRANT

Having select on objects isnt safe as the user can see all objects. Correct so this one we...

Ahhhh yes i didnt read the 'USER' database; anyways if i run it against one of the production databases i get:

GRANT EXECUTE dbo sp_alterdiagram
GRANT EXECUTE dbo sp_creatediagram
GRANT EXECUTE dbo sp_dropdiagram
GRANT EXECUTE dbo sp_helpdiagramdefinition
GRANT EXECUTE dbo sp_helpdiagrams
GRANT EXECUTE dbo sp_renamediagram

As...

I ran the following query and i ask if you can also to find the database permissions granted to the public role and see the result below: