Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

i have made columns in some of the tables encrypted in sql server 2008. Now as i am a db owner i have the access to encode and decode the data using the symmetric key and certificate. But some other users have only currently datareader and datawriter rights ,and when they execute any SP referring the logic which uses the key and certificate "User does has not right on the certificate to execute". What rights / exact permission should i grant them just to solve this problem

share|improve this question
no comments ? no discussion – paranjai Mar 22 '10 at 7:21
up vote 2 down vote accepted

The following command is used to grant users rights to a certificate:

ON CERTIFICATE :: certificate_name
TO username
share|improve this answer
it doesn't works , sql server raises an error Msg 156, Level 15, State 1, Line 2 Incorrect syntax near the keyword 'to'. – paranjai Mar 25 '10 at 11:40
Sorry I forgot to include the :: before certificate_name. It is actually required so it may be causing your issue. – Sean Howat Mar 25 '10 at 13:48
I think I mucked something else up. Execute is not available on certificates. I believe you need to use CONTROL for your users to be able to access the cert. Sorry for the mistakes but it's been a while since I've used this and I was just going off the top of my head. – Sean Howat Mar 25 '10 at 14:02
Thanks a ton ..!! :) It worked – paranjai Mar 27 '10 at 7:02

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.