locked
grant read access on all and future tables? RRS feed

  • Question

  • is there a simple way of granting read access to every table to a an AD account…

     

    I want also if a new database or table is created in the future, for that user to automatically have read accesss… I was looking for like a server-wide permission instead of sysadmin ‘sysreader’, can that be done?

    • Moved by Olaf HelperMVP Thursday, June 29, 2017 10:26 AM Moved from "Database Engine" to a more related forum
    Tuesday, June 27, 2017 4:12 PM

Answers

  • For database-level there is db_datareader.

    On server-level, you can add the AD account to the model database and add membership in db_datareader in that database. I am not sure that I recommend this, though.

    On SQL 2014 and later you can grant CONNECT ANY DATABASE and SELECT ALL USER SECURABLES, which is a better alternative.

    Tuesday, June 27, 2017 9:25 PM