none
Need help with dbcreator server role permissions. RRS feed

  • Question

  • Why there are different permissions on sever instance for the login - sql authentication and login - windows authentication with server role - dbcreator? Sql user has "alter any database" permission while windows user does not.


    • Edited by hegth Monday, September 16, 2019 12:35 PM
    • Moved by Tom Phillips Monday, September 16, 2019 1:45 PM Security question
    Monday, September 16, 2019 12:34 PM

All replies

  • Read my blog regarding dbcreator server role

    http://dimantdatabasesolutions.blogspot.co.il/2010/09/be-careful-to-grant-dbcreator-server.html


    Best Regards,Uri Dimant SQL Server MVP, http://sqlblog.com/blogs/uri_dimant/

    MS SQL optimization: MS SQL Development and Optimization
    MS SQL Consulting: Large scale of database and data cleansing
    Remote DBA Services: Improves MS SQL Database Performance
    SQL Server Integration Services: Business Intelligence

    Monday, September 16, 2019 12:35 PM
  • Hello Friend,

    I don't see these differences between the Sql Server and Windows login.
    You can give the same permissions for both types of login.
    Can you show us an example of this error?

    Se esta resposta lhe ajudou, marque-a como útil para que outra pessoa com dúvida ou problema semelhante possa encontrar resposta ou ajuda mais facilmente. * Jefferson Clyton Pereira da Silva - [ MCSA | MCP | MCTS | MTA | Analista de Banco de Dados - Sql Server e Oracle ]

    Monday, September 16, 2019 12:50 PM
  • Hi hegth,

    Members of the dbcreator fixed server role can create, alter, drop, and restore any database.

    Please refer to Server-Level Roles for more details.

    >> Sql user has "alter any database" permission while windows user does not.

    If your windows login account is an administrator account, it cannot grant alter any database permission.Because as the administrator account, it belongs to the sysadmin server role with the highest authority.

    However, if your windows login account is not an administrator account, it can grant alter any database permission.

    Hope those could help you.

    Best Regards,

    Amelia Gu



    MSDN Community Support
    Please remember to click "Mark as Answer" the responses that resolved your issue, and to click "Unmark as Answer" if not. This can be beneficial to other community members reading this thread. If you have any compliments or complaints to MSDN Support, feel free to contact MSDNFSF@microsoft.com.

    • Proposed as answer by Tom Phillips Tuesday, September 17, 2019 12:31 PM
    Tuesday, September 17, 2019 7:28 AM