AD Group SQL Login Access Details

  • Good Morning,

    We have AD Group with members. The AD Group is created as SQL Server login. I would like to know what all access this login has. Please let me know.

  • Quickest would be to use DBATools and the get-dbauserpermission function to extract the detail your after.

    Otherwise your into querying the DMVs like server_permissions, database_permissions (in each DB), roles, role_members and splicing all the different pieces of data together.

     

  • Actually, the group is a member of some user defined role. I want to know what all permissions this role has. How to do it?

  • In the database, query sys.database_permissions and filter on the role id, join that back to sys.objects and you got what you need.

Viewing 4 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply