Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Sorry about the title of the post, but I didn't quite know how to explain this. Here's my issue.

I have a SQL Server that I manage. It is in an Active Directory domain and since I'm the domain admin, I have full rights to it.

I would like to "lock down" the server so that other users can create databases, but cannot have access to mine.

Currently, the other users are using a username that has the same rights as SA. The SA account is scheduled for disabling by the end of the year.

Of course they have become very used to creating there own databases and users without any help from me. I would like to lower there rights so that they can keep using there databases and create any usernames that they would need, but would no longer have the rights of the SA account.

Any ideas? Thanks in advance.

share|improve this question

migrated from stackoverflow.com Oct 11 '09 at 3:14

This question came from our site for professional and enthusiast programmers.

1 Answer 1

Look in Books Online for the topic on server-level roles; you're describing the dbcreator role, which can create & manage their own databases, but not databases created by others.

share|improve this answer
    
Bull. "Members of the dbcreator fixed server role can create, alter, drop, and restore ANY database." - msdn.microsoft.com/en-us/library/ms188659.aspx A regular user granted the dbcreator role can DELETE ANY database, including databases they do not own, even though they cannot otherwise access them. –  Triynko Jan 17 '11 at 22:28

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.