Click here to monitor SSC
SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 
        
Home       Members    Calendar    Who's On


Add to briefcase

Creating Roles in SQL Server Expand / Collapse
Author
Message
Posted Monday, December 31, 2012 4:15 AM
SSC Veteran

SSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC Veteran

Group: General Forum Members
Last Login: Monday, October 13, 2014 4:08 AM
Points: 268, Visits: 670
Hi,

I am new in Administration group. I read over internet that user that are created using windows auhentication have all the database rights [url=http://http://databases.about.com/od/sqlserver/ht/Creating-A-Sql-Server-2008-Database-Account.htm][/url]. Which i thing is not correct, because i have a windows authentication account but i cannot execute DMV's. To check this i thought of creating a temp user account on a local dev server.

I tried to create a account with windows authentication but did not get where to set the DMV's permission to the user.(I though of DMV's because my actual DEV account is without the access to DMV's ).

Now i want to know how to set the Different permission for the user we are creating.
Post #1401353
Posted Monday, December 31, 2012 10:47 AM


SSCertifiable

SSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiable

Group: General Forum Members
Last Login: Today @ 10:47 AM
Points: 7,126, Visits: 12,727
Shadab Shah (12/31/2012)
Hi,

I am new in Administration group. I read over internet that user that are created using windows auhentication have all the database rights Creating a SQL Server 2008 Database Account By Mike Chapple. Which i thing is not correct, because i have a windows authentication account but i cannot execute DMV's. To check this i thought of creating a temp user account on a local dev server.

I think I see the language in the article that may have led you to believe that, but it is not the case and not what the author was trying to say.

This:

In Windows authentication mode, you assign all database permissions to Windows accounts.


Does not mean that all SQL Server logins that are based on Windows Accounts have "all database permissions." It mean that when you create a SQL Server login based on a Windows Account that all permissions granted to the SQL Server login are in essence attached to the Windows Account. A subtle distinction, but an important one. Make sense?

You still must grant SQL Server permissions to the SQL Server login. The fact this it is based on a Windows Account does not afford it any additional permissions over a login that utilizes SQL Server Authentication.

I tried to create a account with windows authentication but did not get where to set the DMV's permission to the user.(I though of DMV's because my actual DEV account is without the access to DMV's ).

Now i want to know how to set the Different permission for the user we are creating.

Which DMVs are you trying to grant access too? In general granting the server-level permission VIEW SERVER STATE allows the use of many of the DMOs (Dynamic Management Objects > includes DMVs and DMFs).


__________________________________________________________________________________________________
There are no special teachers of virtue, because virtue is taught by the whole community. --Plato
Post #1401448
« Prev Topic | Next Topic »

Add to briefcase

Permissions Expand / Collapse