Permissions for DB User RRS feed

  • Question

  • Hi

    I have created a Windows SG as the SQL Login, like: contoso\sg

    then i mapped the login to DB Test with user: contoso\sg(connect permission)

    there is a Winows User in that SG constoso\user, and i also created a db user(contoso\user) for this windows user with permission CONTROL.

    UserName         RoleName  LoginName DefDBName 
    contoso\user     public        NULL          NULL    

    i have serval questions about this:

    1. Although i do not give a connect permission for suer constoso\user, but it still can connect to the database. is this becuase of the user belong to the SG?

    2. After the windows user logged on, the windows user will map to db user contoso\user, as i right?

    Hard work, hard play!

    Tuesday, May 14, 2013 8:06 AM


  • For the first question:

    1) CONNECT permission is granted to public by default, so that is who CONTOSO\USER got permission to connect.

    2) Correct. There are a few cases when you always map to dbo, but this is not one of then.

    Erland Sommarskog, SQL Server MVP, esquel@sommarskog.se
    • Marked as answer by refeiner Wednesday, May 15, 2013 5:27 PM
    Tuesday, May 14, 2013 9:45 PM