|
|
|
SSC-Enthusiastic
      
Group: General Forum Members
Last Login: Wednesday, June 12, 2013 8:27 AM
Points: 137,
Visits: 291
|
|
| Under SQL Server 2000, our corporate security group was granted the sysadmin role in order to managed logins and db access. In 2005, we would like to grant them the securityadmin role, however, when we grant a login this role, they can create a login, but cannot grant it db access or assign db_roles. BOL says that the secorityadmin role should be able to manage db access and roles. The error we get says that the securityadmin login cannot access a database under the current security context. Has anyone else had this problem, or are we missing something?
|
|
|
|
|
Hall of Fame
       
Group: General Forum Members
Last Login: Saturday, November 10, 2012 8:18 AM
Points: 3,461,
Visits: 346
|
|
You add them to the security admin group in the database. That should be fine.
Cheers, Sugeshkumar Rajendran SQL Server MVP http://sugeshkr.blogspot.com
|
|
|
|
|
SSC-Enthusiastic
      
Group: General Forum Members
Last Login: Wednesday, June 12, 2013 8:27 AM
Points: 137,
Visits: 291
|
|
In BOL it says:
Members of the securityadmin fixed server role manage logins and their properties. They can GRANT, DENY, and REVOKE server-level permissions. They can also GRANT, DENY, and REVOKE database-level permissions. Additionally, they can reset passwords for SQL Server logins.
Why, then, do we have to grant the login the db_securityadmin role in each database?
|
|
|
|
|
Hall of Fame
       
Group: General Forum Members
Last Login: Saturday, November 10, 2012 8:18 AM
Points: 3,461,
Visits: 346
|
|
|
|
|