Re: System Administrator Implied Permissions

From: Dan Guzman (danguzman@nospam-earthlink.net)
Date: 03/30/03 

From: "Dan Guzman" <danguzman@nospam-earthlink.net>
Date: Sun, 30 Mar 2003 09:32:48 -0600

> SQL Server initially creates the 'sa' user. Isn't the
> db_owner an implied permission for the fixed server role
> System Administrator anyway? If this is the case, why
> the redundancy?

Members of the sysadmin role are automatically mapped to the 'dbo' user
in all databases. This is somewhat different that being a db_owner
fixed database role member because the 'dbo' user can also perform
functions on the owned database outside the database context, such as
DROP DATABASE. 

-- 
Hope this helps.
Dan Guzman
SQL Server MVP
-----------------------
SQL FAQ links (courtesy  Neil Pike):
http://www.ntfaq.com/Articles/Index.cfm?DepartmentID=800
http://www.sqlserverfaq.com
http://www.mssqlserver.com/faq
-----------------------
"Jose Molina" <jmolina4@cox.net> wrote in message
news:002601c2f68b$0fce98c0$3401280a@phx.gbl...
> Hello,
> I had a question concerning the database permissions SQL
> Server checks for the 'sa' role.  The db_owner fixed
> database role is checked for each of the databases when
> SQL Server initially creates the 'sa' user. Isn't the
> db_owner an implied permission for the fixed server role
> System Administrator anyway?  If this is the case, why
> the redundancy?
>
> Thanks!
>
> -Jose

Relevant Pages

  • Re: Permission clarification - dbo vs domainuser.dbo
    ... database is mapped to the special user inside each database called dbo. ... any object created by any member of the sysadmin fixed server role ...
    (microsoft.public.sqlserver.security)
  • Re: What type of Server Roles to assign for Backup and Recovery
    ... Any member of db_backupoperator can perform backups on the same database. ... Members of the fixed server role, dbcreator, can create databases. ... and remove logins from these roles as required. ...
    (microsoft.public.sqlserver.security)
  • Re: Set Identity_Insert On throws error
    ... fixed server role, and the db_owner and db_ddladmin fixed database ... > The current user is not the database or object owner of table ... Can anyone tell me how I can grant permission to ...
    (microsoft.public.sqlserver.security)
  • Re: Triggers on Insert, Delete
    ... I guess it's the problem with permissions. ... the db_owner fixed database role in the master database ... and members of the sysadmin fixed server role, ...
    (microsoft.public.sqlserver.server)