Re: Permissions for EM

Note in my initial post - I had to REVOKE all permissions from the public
roles. db_securityadmin, therefore, does not have sufficient privileges any
longer to do anything, so I want to create a new database role with the
permissions needed to allow our security administrators to do their jobs,
which is creating logins, granting privs, etc.


"Arnie Rowland" <arnie@xxxxxxxx> wrote in message
news:u1XnaK1pGHA.2292@xxxxxxxxxxxxxxxxxxxxxxx
As long as the user has server login priviliges, they 'should' be able to
use EM. And they will have access to any object with public
permissions -including any other db on the server that allows public
access. (Northwind and Pubs are allow Public access to everything, so they
should be removed from production servers.)

Then to access a specific db, they need to be provided access to the db,
and put in the desired role.

--
Arnie Rowland*
"To be successful, your heart must accompany your knowledge."



"A McGuire" <allen.mcguire@xxxxxxxxxxxxxxxxx> wrote in message
news:u6rZf10pGHA.3584@xxxxxxxxxxxxxxxxxxxxxxx
What permissions are needed to utilize Enterprise Manager?

Long story, but public role has all rights revoked, so I want to create a
new database role that has access to what it needs to get into the EM.





.

Relevant Pages

  • RE: [Maybe spam] Re: Relation of OS user to Informix database
    ... user who has those rights because they're a member of public? ... then you can't revoke their rights without revoking public's ... > RESOURCE permissions from the informix DBA user. ... When you created the database, was a MODE ANSI database, or a logged or ...
    (comp.databases.informix)
  • Making sp_permissions work in 2005 vs 2000
    ... Grant, revoke, or deny SELECT permissions on this object. ... CREATE TABLE #tmpInher ( ... CASE WHEN xtype IN THEN ...
    (microsoft.public.sqlserver.security)
  • RE: [Maybe spam] Re: Relation of OS user to Informix database
    ... You can only revoke a privilege that exists explicitly and you are the ... if a user's rights are part of "public" then you cannot prevent the ... >> RESOURCE permissions from the informix DBA user. ... >When you created the database, was a MODE ANSI database, or a logged or ...
    (comp.databases.informix)
  • Re: deny permissions issues
    ... I am not sure what is the reason to revoke SELECT on objects in sys schema ... because resultsets will be filtered already by permissions. ... I have tried using the following commands without any success: ... DENY SELECT ON SCHEMA::sys TO public ...
    (microsoft.public.sqlserver.security)
  • Re: Fwd: That whole "Linux stealing our code" thing
    ... "...That means that having granted a permission, the copyright holder can not retroactively say that an individual or class of individuals are no longer granted those permissions. ... Likewise should the copyright holder decide to "go commercial" he can not revoke permissions already granted for the use of the work as distributed, though he may impose more restrictive permissions in his future distributions of that work." ...
    (Linux-Kernel)