Set Custom Security Access?

[Ovatvvon]

Besides setting roles and permissions for a sql account, is there a way to specify to greater detail what they can and cannot do?

For instance, if I do not want a SQL account to have access to all DDL capabilities, yet I would like to allow them to initiate Update Statistics when they want, is there a way to enable that for the account somewhere / somehow?


-Ovatvvon :-Q

 

[mrdenny]

What version of SQL Server?

Denny
MCSA (2003) / MCDBA (SQL 2000)
MCTS (SQL 2005 / Microsoft Windows SharePoint Services 3.0: Configuration / Microsoft Office SharePoint Server 2007: Configuration)
MCITP Database Administrator (SQL 2005) / Database Developer (SQL 2005)

--Anything is possible. All it takes is a little research. (Me)

http://www.mrdenny.com

 

[Ovatvvon]

They are in the process of migrating from SQL 2000 to 2005. So idealy, 2005, but if you know the how it can be done for either 2000 or 2005 (or both), that would be great!


-Ovatvvon :-Q

 

[mrdenny]

SQL 2005 has lots of security that you can grant to a user to allow them to do a wide variety of things. Look in BOL under "GRANT statement, databases" for a good list of the rights you can grant to a user. Most are fairly self explanitory.

SQL 2000 doesn't really have all these rights. It does have some of them though, so check out the BOL for SQL 2000 as well.

Denny
MCSA (2003) / MCDBA (SQL 2000)
MCTS (SQL 2005 / Microsoft Windows SharePoint Services 3.0: Configuration / Microsoft Office SharePoint Server 2007: Configuration)
MCITP Database Administrator (SQL 2005) / Database Developer (SQL 2005)

--Anything is possible. All it takes is a little research. (Me)

http://www.mrdenny.com