Re: Allow a 'user' to create new users
- From: Erland Sommarskog <esquel@xxxxxxxxxxxxx>
- Date: Wed, 09 Jan 2008 15:06:20 -0800
MSUTech (MSUTech@xxxxxxxxxxxxxxxxxxxxxxxxx) writes:
I have given a user the ability to CREATE DATABASES.
I would like this user to have the ability to create users within those
databases, but, not to be able to modify the users within other databases
within the server.
I think making them a 'Security Administrator', gives them access to all
logins.. do I have other options?
Yes, do nothing. Since this user creates databases, he will also be the
owner of them, and have full control within those databases.
Not that he will not be able to create server logins, nor should you give
him permission to do so, unless you want to trust him server-wide. (And
you said you don't.)
--
Erland Sommarskog, SQL Server MVP, esquel@xxxxxxxxxxxxx
Books Online for SQL Server 2005 at
http://www.microsoft.com/technet/prodtechnol/sql/2005/downloads/books.mspx
Books Online for SQL Server 2000 at
http://www.microsoft.com/sql/prodinfo/previousversions/books.mspx
.
- Prev by Date: Re: Show execution plan
- Next by Date: Re: sql server 2005 account lockout
- Previous by thread: Show execution plan
- Next by thread: Re: Allow a 'user' to create new users
- Index(es):
Relevant Pages
|
|
