question

Waqar_lionheart avatar image
Waqar_lionheart asked

whose permissions will apply? group user or individual user

Hi All, A newbie to admin side of things. We are using 2008 standard edition. We have some users who are part of a group account. A windows group account. for example. domain\devuser1 is also a member of domain\devusergroup. User group has less privileges than devuser1. Once i log in with devuser1, how are permissions cascaded. I know deny trumps grant. But my problem is that the master development account is setup on its own with sysadmin rights as well as member of devusergroup which has less permissions. Just wondering if I am going to run into trouble at any point? Any help is greatly appreciated. Regards, Waqar
userusersaccountuser rightsuser-group
10 |1200

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

1 Answer

·
Kev Riley avatar image
Kev Riley answered
sysadmin wins very time. From MS: > Members of the sysadmin fixed server role and object owners cannot be denied permissions. https://docs.microsoft.com/en-us/dotnet/framework/data/adonet/sql/authorization-and-permissions-in-sql-server
10 |1200

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Write an Answer

Hint: Notify or tag a user in this post by typing @username.

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.