Friday, March 30, 2012

how to control it's right of a sysadmin roles menbers

i have a sql 2005 server, I caeat i login accout & give it db_owner roles
for a application. but the application still can't work well unless i
give the account sysadmin server roles.
so ,i give the accout sysadmin roles. but i don't the user to view other
database.
I have refuse some right like " view any database " for the account on
the server property-- right.
but i don't know why the accout staill have all the sysadmin right , to
view any database.
. how can i control it's right of a sysadmin roles menbers
i donn'n know how to do?
Ryan.You can't restrict permissions of sysadmin role members. The purpose of the
sysadmin role is to provide administrators with full access to SQL Server.
It is not intended for routine application use.

> but the application still can't work well unless i
> give the account sysadmin server roles.
Can you elaborate on why the application won't work as a non-sysadmin role
member? I would think you could create your own role(s), grant the role the
permissions needed to execute your application and then add the application
users to the role.
Hope this helps.
Dan Guzman
SQL Server MVP
"Ryan" <Ryan@.discussions.microsoft.com> wrote in message
news:48867756-671D-4CCB-8E26-C7581999EEA5@.microsoft.com...
>i have a sql 2005 server, I caeat i login accout & give it db_owner roles
> for a application. but the application still can't work well unless i
> give the account sysadmin server roles.
> so ,i give the accout sysadmin roles. but i don't the user to view other
> database.
> I have refuse some right like " view any database " for the account on
> the server property-- right.
> but i don't know why the accout staill have all the sysadmin right , to
> view any database.
> . how can i control it's right of a sysadmin roles menbers
> i donn'n know how to do?
> --
> Ryan.sql

No comments:

Post a Comment