Post reply

Anything you CAN'T do in SQL Server with SYSADMIN role?

  • September 29, 2010 at 1:41 am

    #227096

    Does anyone know if there is anything you cannot do with the SYSADMIN role in SQL Server?

    For example what is the 'next level' server role down from this and what are the security differences? For example if I wasn't allowed to have SYSADMIN but all other server roles what wouldn't I have?

  • September 29, 2010 at 2:03 am

    #1228800

    Not to worry. I've managed to do the comparison using sp_srvrolepermission and comparing the permissions for each of the roles.

  • September 29, 2010 at 2:03 am

    #1228801

    Sysadmin has complete and total control over the entire instance, has all permissions to do anything and is not affected by DENY.

    I suggest you have a read through Books Online, on each of the fixed server roles and see what permissions are granted and what they imply. Eg sysadmin's sole permission is GRANT WITH GRANT CONTROL SERVER.

    Gail Shaw
    Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
    SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

    We walk in the dark places no others will enter
    We stand on the bridge and no one may pass

Viewing 3 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply