Post reply

Setting up security on a new database

  • August 25, 2009 at 11:23 pm

    #209918

    I have been asked by my superiors to administer a new SQL Server until they can employee a SQL DBA so I am asking this noob question in the hope that you guys can tread lightly, maybe even have a laugh.

    I have created a new database on our MS SQL 2005 server. I need to install the SQL Server client on three workstations so that the three developers can start setting up the new database. How do I configure security on SQL Server so that when the three developers startup their SQL Client, they only see the database they should be seeing?

    I have setup a security group in Active Directory which I can assign the three developers to, it's called "gApp_CLA-IT_WEBSERVICES_-NETSTORE-QA_Administrators". I would like to setup SQL Server so that only the members of this group can see the respective database(s). Is this possible?

    How do I test the above without actually asking those users for their logon credentials and logging onto my workstation as them?

    Thanks.

  • August 26, 2009 at 1:14 am

    #1044721

    If you provide specific privilages to the group, all users will have same privilages.

    Instead, Add each NT ID as a Login and provide rights to access a specific database(make that database as his/her default database).

    This URL from msdn should guide you.

    http://msdn.microsoft.com/en-us/library/aa337562.aspx


    Pradeep Singh

  • August 26, 2009 at 1:20 am

    #1044722

    Once you have created the login, you can provide specific privilages for databases to each developer.


    Pradeep Singh

  • August 27, 2009 at 6:10 am

    #1045456

    Pradeep, if the users are a part of the same group, wouldn't it make better sense to go the route that the user is already taking...setting up the Active Directory group, adding the users to that group, then adding a log-in for that group in SQL and assigning database perms on that group? That way, if other users need access, then they only need to be added to the Active Directory group. It's a recommended practice to assign perms to groups, as opposed to individual accounts. Just my understanding. Perhaps Steve, Gail or some other expert can share their thoughts. Thanks.

    Chris

  • August 27, 2009 at 11:17 pm

    #1046045

    Christopher has hit the nail on the head! I just need a link to instructions on how to set this up for an Active Directory group. Thanks.

Viewing 5 posts - 1 through 5 (of 5 total)

You must be logged in to reply to this topic. Login to reply