sql server - SQL Domain Group with one member Read Only -
I have created a group called 'Domain SQL Admin', which has 3 high level employees and 2 common usernames, very strong password ) This group has been added to various SQL Servers and the powers of the deity have been given.
My question - is there a way to downgrade one of the common user names to read only on a particular server? Examples: The desired result - The 'Domain SQL Administrator' group:
- Domains \ sysadmin
- Domain \ JSmith (sysadmin) / Li>
- Domain \ DJones (sysadmin)
- domain \ server user (sysadmin)
- domain \ jobreer (read only)
I think that I just remove the read user and add a new group / this user in particular to each question in question.
Thank you.
SQL 2008 R2
Since you used the AD Group to create a login Has given permission / fixed roles. If a user is a member of the group and will have all the permissions / roles assigned to that group. Even if you create a separate login for that user and take permissions at that personal login level, then that user will still have the permission because he is a member of a group that has all the permissions.
You have to remove that user from the AD group. Create another group for read only permission or use user's account to allow only read-only permission for that user.
Comments
Post a Comment