Default Database roles and there permissions in MS SQL
January 29, 2010 by: SanketDefault Database roles and there permissions in MS SQL
Database roles: Each database has a set of fixed database roles, to which database users can be added. These fixed database roles are unique within the database. While the permissions of fixed database roles cannot be altered, new database roles can be created. Here are the fixed database roles and their associated permissions in SQL Server:
|
Fixed database role |
Description |
|
db_owner |
Has all permissions in the database |
|
db_accessadmin |
Can add or remove user IDs |
|
db_securityadmin |
Can manage all permissions, object ownerships, roles and role memberships |
|
db_ddladmin |
Can issue ALL DDL, but cannot issue GRANT, REVOKE, or DENY statements |
|
db_backupoperator |
Can issue DBCC, CHECKPOINT, and BACKUP statements |
|
db_datareader |
Can select all data from any user table in the database |
|
db_datawriter |
Can modify any data in any user table in the database |
|
db_denydatareader |
Cannot select any data from any user table in the database |
|
db_denydatawriter |
Cannot modify any data in any user table in the database |
