dbcreator role - Did you know? - SQL Server Security - LearnSqlServer.com's SQL Server Forums

Member of the LearnItFirst.com Video Training Network	\| LearnSqlServer.com \| SQL SSIS Training \| SQL Programming Tutorials \|

Welcome Guest

Search | New Posts | Members | Log In | Register

LearnSqlServer.com's SQL Server Forums » SQL Server Database Administration » SQL Server Security » dbcreator role - Did you know?

dbcreator role - Did you know?

Options

Previous Topic · Next Topic

Scott Whigham

Posted: Thursday, August 10, 2006 5:56:35 AM

Rank: Super Mod

Joined: 3/20/2006
Posts: 345
Points: 748
Location: Dallas, TX

During consulting and training, I talk to a lot of people who get a bit confused about the dbcreator fixed server role. Here's the usual discussion:

Quote:

Developer: I need to be able to create my own test databases.

DBA: Okay, I'll put you in the "dbcreator" role

What's the problem with this scenario? The permissions for dbcreator are, of course, to be able to create any database but also to be able to DROP/ALTER any database on the entire server regardless of whether or not you even have a user account in the database!

The better approach, for SQL Server 2005, is more along these lines:

Quote:

Developer: I need to be able to create my own test databases.

DBA: Okay, I'll issue a "GRANT CREATE ANY DATABASE to Developer" statement

If you have CREATE ANY DATABASE permission then you can create databases but only drop/alter the databases you own. Thank you, Microsoft Smile

Hope this helps Smile

Users browsing this topic

Guest

Forum Jump

You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.