Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
| Author |
Topic |
|
nishithrn
Yak Posting Veteran
58 Posts |
 Posted - 2004-09-30 : 10:54:22
|
| Hello,I have a user having read access for a particular database. Out of 100 odd objects withih the database, this user has permission to read onlt 50 objectes. Now as per our organisation's security guidlines, I will have to create a database role having read permissions on par with the above user, and add individual domain id's into that database role.Can someone pls. tell me how to do the same through query..??? I want to avoid doing the above operation through Enterprose Manager.Regards |
|
|
eyechart
Master Smack Fu Yak Hacker
3575 Posts |
Posted - 2004-09-30 : 11:03:14
|
| I would create the role once, and then grant that role to a domain group instead of individual domain users. This way, you can easily add users into the domain group and they are automatically granted the database role you created.If you want to create roles and grant priveleges in Query Analyzer you should look up the GRANT, REVOKE, sp_addrole, sp_droprole and sp_addrolemember commands in BOL. -ec |
 |
|
|
|
|
|
Object Permissions !!!