Database Developer Permissions Questions

  • I have a group of web developers that I want to also grant limited database privileges to. I am thinking of giving them db_datareader, db_datawriter and db_ddladmin roles within a specific database user login they would log in under. This would grant them MOST of what they'd need, IE they could read, update and delete data plus make new tables, views, procedures and triggers but it does not grant them the ability to execute the stored procedures. It seems that permissions to execute re not granted database wide as in their is no fixed role, and instead each stored procedure must be granted execute individually.

    So my question is this; Is there a way to grant database wide permission to execute any/all stored procedures in a given database? IE, am I missing something obvious here?

  • You can grant EXECUTE permissions on schema level:

    GRANT EXECUTE ON SCHEMA::dbo TO someone

    or on database level:

    GRANT EXECUTE TO someone

    [font="Times New Roman"]Erland Sommarskog, SQL Server MVP, www.sommarskog.se[/font]

  • Bingo, and thank you!

    Still learning as my duties allow 😉

  • May I ask you where this permission granted as in "GRANT EXECUTE TO TESTROLE" is enumerated?

  • sys.database_permissions.

    [font="Times New Roman"]Erland Sommarskog, SQL Server MVP, www.sommarskog.se[/font]

  • Gratzi sir....

Viewing 6 posts - 1 through 5 (of 5 total)

You must be logged in to reply to this topic. Login to reply