Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
| Author |
Topic |
|
Vivaldi
Constraint Violating Yak Guru
298 Posts |
 Posted - 2005-09-09 : 08:49:12
|
| Hello,I am working on tightening security of some SQL Servers on our network. We use NT Domain Accounts for access.The sys admins have a group setup to represent developers. OurDomain\Dev (ex:)If I give this NT Group/Role permissions to a database, will the NT users under the group get the permission as well? (I would test this, but our servers are full of individual permissions and I can't start dropping users)I haven't been able to find anything on this using google yet. Any pointers to an article or explanations? Thanks________________________________________________Working man's privilege, beer is.Harsh, Life is. |
|
|
mr_mist
Grunnio
1870 Posts |
Posted - 2005-09-09 : 08:55:31
|
| Yes, the users in the group would inherit the group's permissions whilst retaining any that they have individually.If you deny an action to either a user or a group then that takes priority over any allow permission.-------Moo. :) |
 |
|
|
Vivaldi
Constraint Violating Yak Guru
298 Posts |
Posted - 2005-09-09 : 09:04:15
|
Thanks,I found an article just now that really explains what i was asking about. I figured they did, just needed some confirmation.http://www.developer.com/tech/article.php/721441quote:
Originally posted by mr_mist
Yes, the users in the group would inherit the group's permissions whilst retaining any that they have individually.If you deny an action to either a user or a group then that takes priority over any allow permission.-------Moo. :)
________________________________________________Working man's privilege, beer is.Harsh, Life is. |
|
|
|
|
|
|
NT Security