Hi everyone,
I'm trying to grant a non-SA user the permission to execute this, without adding him to every single db in the instance and without granting him making changes to tables ecc:
USE [somedb]
CREATE USER [someuser] FOR LOGIN [someuser]
GO
Is it possible? Sure not a best practice, but still need it.
Thank you in advance,
To do that without adding to each db in the instance would need a server-level role, possibly securityadmin, but as pointed out here that's pretty much the same as sysadmin: https://docs.microsoft.com/en-us/sql/relational-databases/security/authentication-access/server-level-roles?view=sql-server-ver15 when it comes to user and server permissions.
Server role - securityadmin
Database role - db_securityadmin
Or even better if you can create custom roles both server and database, just add them to a custom role which has only the permissions you want them to have.
17 People are following this question.
