• Steve Cullen (7/6/2010)


    SQL Server uses a role based security model. Your databases get created already without granting access to users on the server. You should set up database roles with whatever permissions you wish, then make your users members of those roles as required.

    Ok I think this is where I am fuzzy, on how to set up these roles properly to do this.

    So I would create roles at the server level like:

    AccessDB-A

    AccessDB-B

    (I'd use less stupid names on server, just want to keep this simple and clear.)

    Then apply the AccessDB-A role on the Group A login group?

    You should however make sure that users on a server do not have admin priviledges at the OS level, or they will get access to all databases on the server.

    They do not, and any of my users who do give them such should be flogged.