Steve Jones - SSC Editor (3/22/2013)

---

SQL Server roles won't help here. Row based access means you're using joins to help accomplish this.

A couple links that might help:
http://technet.microsoft.com/en-us/library/cc966395.aspx
http://stackoverflow.com/questions/1122513/how-to-implement-database-access-control-on-row-basis

Steve Jones - SSC Editor (3/22/2013)

---

You are right, I did. I was thinking row and misread that. I've seen RBAC mostly as row based, not role.

In terms of roles, there isn't a script to do this because the roles will have disparate requirements. Ultimately you need to map roles to specific tables and rights. Build a grid of the roles (admin, manager, developer, reporting user, data entry, etc), the tables, and rights( select, insert, update, delete).

You can do this a few ways, but essentially drop two of these on the axis and the third in the middle.

Once you've determined who gets what rights, it's easy. Create the roles. Add the rights to the roles for the objects, move people into roles.

SQLCrazyCertified (3/22/2013)

---

Maybe I am still not clear with my requirement, I think there has to be a way that I can do this using script....because we have hundreds of insances and maybe 1000 or more databases, and I need to create these roles in every database.

Basically, we are looking to create some customized roles that will replace the SQL standard roles, for example db_datareader, etc......

So, you are saying this won't be doable?

SueTons.

Lynn Pettis (3/22/2013)

---

The way I would start, is do the first one manually creating the scripts as I went along using SSMS. Then it is just a matter of automating those scripts.

But you still need to start where Steve said before you even start appling these changes.