We help IT Professionals succeed at work.

db_dataowner priveleges

pma111
pma111 asked
on
98 Views
Last Modified: 2019-03-29
Can I ask for some specific scenarios when a user would require db_dataowner privileges? I am looking at security permissions and have quite a number of users with db_dataowner over a few databases, but before asking for that to be removed, it would help knowing any particular reasons why that level of access may be required. For info none of the users are DBA's! But some do have systems admin responsibility for the over-arching applications which use these databases for records storage.
Comment
Watch Question

CERTIFIED EXPERT

Commented:
Hi,

users with the db_owner role can basically do anything with the database, alter users roles and even remove it. The sysadmin role sits on top of that and doesn't need to have db_owner privileges. Regular users should not be a member of this role. Just give db_read and db_write so those users are able to alter data.

Cheers
ina_donInformation Systems Expert
CERTIFIED EXPERT

Commented:
Hi,

I think you need to look at the applications that they use and what functionality they have in the DB. This could have been someone who didn't want to go into the trouble of securing the application properly if users are authenticated directly to the DB. If each user that is granted to the application has an account on the DB, then to make sure they can work properly, you'd need to setup correct permissions for them to read/write data, execute stored procedures and access views and functions.
Certified Database Administrator
CERTIFIED EXPERT
Commented:
This problem has been solved!
(Unlock this solution with a 7-day Free Trial)
UNLOCK SOLUTION

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions