August 16, 2016 at 2:16 pm
Where does the setting to grant or deny ALTER LOGIN exist? We are experiencing a situation where we are able to create our own logins but not any other login. Clearly none of us has the ability to create logins from a permissions perspective since Alter ANY login is not granted and we are not admins either. The only permissions we have are Read/Write at database level and View any database and View any definition at the server level. What could be causing this?
August 16, 2016 at 2:30 pm
You answered your own question. ALTER LOGIN requires ALTER ANY LOGIN permission.
Refer to: https://msdn.microsoft.com/en-us/library/ms189828(v=sql.110).aspx
Sue
August 16, 2016 at 2:33 pm
My question is, How do I deny Alter Login permission? Or rather what permission is allowing me to create my own login?
August 16, 2016 at 2:42 pm
How did you connect to SQL Server initially to create your own login? You'd need to connect to the instance somehow to create a login.
Sue
August 16, 2016 at 2:45 pm
I am part of an AD group. The group does not have permissions to create or alter logins.
Viewing 5 posts - 1 through 4 (of 4 total)
You must be logged in to reply to this topic. Login to reply