sql server - SQL Domain Group with one member Read Only -


I have created a group called 'Domain SQL Admin', which has 3 high level employees and 2 common usernames, very strong password ) This group has been added to various SQL Servers and the powers of the deity have been given.

My question - is there a way to downgrade one of the common user names to read only on a particular server? Examples: The desired result - The 'Domain SQL Administrator' group:

  • Domains \ sysadmin
  • Domain \ JSmith (sysadmin) / Li>
  • Domain \ DJones (sysadmin)
  • domain \ server user (sysadmin)
  • domain \ jobreer (read only)

    I think that I just remove the read user and add a new group / this user in particular to each question in question.

    Thank you.

    SQL 2008 R2

    Since you used the AD Group to create a login Has given permission / fixed roles. If a user is a member of the group and will have all the permissions / roles assigned to that group. Even if you create a separate login for that user and take permissions at that personal login level, then that user will still have the permission because he is a member of a group that has all the permissions.

    You have to remove that user from the AD group. Create another group for read only permission or use user's account to allow only read-only permission for that user.

Comments

Popular posts from this blog

Verilog Error: output or inout port "Q" must be connected to a structural net expression -

jasper reports - How to center align barcode using jasperreports and barcode4j -

c# - ASP.NET MVC - Attaching an entity of type 'MODELNAME' failed because another entity of the same type already has the same primary key value -