Permissions

SQLServerCentral Article

Cloning Master Admin User Permissions in Amazon RDS for SQL Server with Fine-Grained Control

  • Article

This article explores how to securely clone the master user permissions in Amazon RDS for SQL Server using a custom stored procedure, usp_rds_clone_login. It outlines a step-by-step process to generate, review, and apply a script that replicates server- and database-level access from the master user to a new login without directly exposing elevated credentials. The guide emphasizes the principle of least privilege, supports named account management, and enables transparent, auditable permission handling for DBAs and applications. Designed for secure and scalable environments, this solution enhances operational security while maintaining administrative flexibility in Amazon RDS.

You rated this post out of 5. Change rating

2025-07-09

469 reads

Blogs

Automated SQL Server Benchmarking with HammerDB and Docker: A Complete Testing Framework

By

I’m excited to announce the release of a new open-source project that fully automates...

Automated SQL Server Benchmarking with HammerDB and Docker: A Complete Testing Framework

By

I’m excited to announce the release of a new open-source project that fully automates...

Advice I Like: Praise

By

Don’t reserve your kindest praise for a person until their eulogy. Tell them while...

Read the latest Blogs

Forums

Change Tracking Data Retention Options

By Steve Jones - SSC Editor

Comments posted to this topic are about the item Change Tracking Data Retention Options

Requiring Technical Debt Payments

By Steve Jones - SSC Editor

Comments posted to this topic are about the item Requiring Technical Debt Payments

Using the FP-Growth Algorithm to Mine Useful Patterns in Data

By Daniel Calbimonte

Comments posted to this topic are about the item Using the FP-Growth Algorithm to...

Visit the forum

Question of the Day

Change Tracking Data Retention Options

If I am running this code:

ALTER DATABASE AdventureWorks2017 SET CHANGE_TRACKING = ON (CHANGE_RETENTION=4 xxx);
What are the possible choices for xxx?

See possible answers