Server Level permission

  • Hi

    I am currently writing something to script out the server level permissions for various accounts. As part of this I am using the sys.server_permissions view. In this view there is a column called Class which can have the following states:

    100 = Server

    101 = Server-principal

    105 = Endpoint

    When matching up my accounts via class I can see that 100 relates to server permissions such as:

    GRANT ADMINISTER BULK OPERATIONS

    DENY ALTER ANY ENDPOINT

    GRANT CONNECT SQL

    GRANT CREATE DDL EVENT NOTIFICATION

    and using class 105 relates to granting permissions to certain endpoints. But what I want to know is what is class 101? I haven't been able to find anything so far that can tell me this.

    Furthermore I was thinking that 101 might be to do with when looking at the securables for a login and you can search and select specific object types of Servers (class 100), Endpoints (class 105) which left me with logins being class 101. However in there are permissions of:

    ALTER

    CONTROL

    IMPERSONATE

    VIEW DEFINITION

    none of which I seem to be able to alter through the GUI even though I am an SA. When I try to check a Deny or With Grant and click OK the details for the securable disappear and when I go back in to check its as though I have not done anything.

    If anyone is able to point me as to what class 101 is and whether they relate to these permissions I would be grateful.

    Thanks

  • Well I have found this article that has helped

    http://msdn.microsoft.com/en-us/library/ms178640.aspx

    Still can't get it working through the GUI though.

  • What error do you get? What statement bombs out?

    If it works from SQL Server then it is an issue with the code within your GUI, .NET, etc.

    For better, quicker answers on T-SQL questions, click on the following...
    http://www.sqlservercentral.com/articles/Best+Practices/61537/

    For better answers on performance questions, click on the following...
    http://www.sqlservercentral.com/articles/SQLServerCentral/66909/

Viewing 3 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply