|
sql
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
sql server management studio to connect to database
I have a sql server 2005 SP2 on which I have three databases dev,prod and test. I need to grant only select access to some users on all three databases so that they can query the tables/views. In order to do that I was planning to Install SQL Server Management Studio on their computer(They do not have C drive but have shared network drive) and then have a domain windows network account to connect to database. Give individual users select permissions to the tables and views. Is this the best method? Thanks dbdba -- ontario, canada
Show quote
Hide quote
"db" <d*@discussions.microsoft.com> wrote in message I would create a domain group, add their windows accounts to that group, news:32D4EC83-8374-4E16-BAE6-404857B64A1A@microsoft.com... > > SQl server 2005 SP2 > > I have a sql server 2005 SP2 on which I have three databases dev,prod and > test. I need to grant only select access to some users on all three > databases > so that they can query the tables/views. > > In order to do that I was planning to Install SQL Server Management Studio > on their computer(They do not have C drive but have shared network drive) > and > then have a domain windows network account to connect to database. Give > individual users select permissions to the tables and views. > > Is this the best method? > > Thanks > dbdba > > > -- > ontario, canada then assign the group the appropriate permissions in the database. That way if they add people, or remove people, you don't have to do anything more in the database. Just ensure that whoever is managing the domain accounts adds these members to the domain group that you are using. Rick > I would create a domain group, add their windows accounts to that group, There are pros and cons w.r.t. this approach in practice. The good thing is > then assign the group the appropriate permissions in the database. That way > if they add people, or remove people, you don't have to do anything more in > the database. Just ensure that whoever is managing the domain accounts adds > these members to the domain group that you are using. that, as you said, it's simple and the DBA doesn't have to do anything with adding a new user. The bad thing is that the DBA can quickly lose visibility into who has what access and especially how one person gets his/her access when people are in multiple groups and groups are nested in groups. Linchi Show quoteHide quote "Rick Sawtell" wrote: > > "db" <d*@discussions.microsoft.com> wrote in message > news:32D4EC83-8374-4E16-BAE6-404857B64A1A@microsoft.com... > > > > SQl server 2005 SP2 > > > > I have a sql server 2005 SP2 on which I have three databases dev,prod and > > test. I need to grant only select access to some users on all three > > databases > > so that they can query the tables/views. > > > > In order to do that I was planning to Install SQL Server Management Studio > > on their computer(They do not have C drive but have shared network drive) > > and > > then have a domain windows network account to connect to database. Give > > individual users select permissions to the tables and views. > > > > Is this the best method? > > > > Thanks > > dbdba > > > > > > -- > > ontario, canada > > I would create a domain group, add their windows accounts to that group, > then assign the group the appropriate permissions in the database. That way > if they add people, or remove people, you don't have to do anything more in > the database. Just ensure that whoever is managing the domain accounts adds > these members to the domain group that you are using. > > > Rick > > > Where can I get sql server management studio? I just want that to remote
connect to sql server 2005 SP2 ... do I need any licence to use it? ontario, canada Show quoteHide quote "Rick Sawtell" wrote: > > "db" <d*@discussions.microsoft.com> wrote in message > news:32D4EC83-8374-4E16-BAE6-404857B64A1A@microsoft.com... > > > > SQl server 2005 SP2 > > > > I have a sql server 2005 SP2 on which I have three databases dev,prod and > > test. I need to grant only select access to some users on all three > > databases > > so that they can query the tables/views. > > > > In order to do that I was planning to Install SQL Server Management Studio > > on their computer(They do not have C drive but have shared network drive) > > and > > then have a domain windows network account to connect to database. Give > > individual users select permissions to the tables and views. > > > > Is this the best method? > > > > Thanks > > dbdba > > > > > > -- > > ontario, canada > > I would create a domain group, add their windows accounts to that group, > then assign the group the appropriate permissions in the database. That way > if they add people, or remove people, you don't have to do anything more in > the database. Just ensure that whoever is managing the domain accounts adds > these members to the domain group that you are using. > > > Rick > > > "db" <d*@discussions.microsoft.com> wrote in message It's on the SQL Server cd. Run setup and only choose the client tools news:E382CFA2-247B-49F1-A0B4-45C159C1F13D@microsoft.com... > > Where can I get sql server management studio? I just want that to remote > connect to sql server 2005 SP2 ... do I need any licence to use it? > feature. You don't need to licence it, it only has to connect to a licenced installation of SQL I have only assigned permissions to the users through (login properties -->
user mapping --> database role membership (db_datareader and public)) on those databases. Users have permissions for tables and views on those databases. User also has permissions on "master, msdb" databases and all the stored procedures and triggers. Users do not need these permissions. How did they got those permissions? Users can see and have permissions on " storage, server objects, management, notification services". Did I install more features then required? What needs to be done so that users can see only three user databases (only select on tables and views). dbdba -- Show quoteHide quoteontario, canada "Bob Simms" wrote: > "db" <d*@discussions.microsoft.com> wrote in message > news:E382CFA2-247B-49F1-A0B4-45C159C1F13D@microsoft.com... > > > > Where can I get sql server management studio? I just want that to remote > > connect to sql server 2005 SP2 ... do I need any licence to use it? > > > It's on the SQL Server cd. Run setup and only choose the client tools > feature. You don't need to licence it, it only has to connect to a licenced > installation of SQL > > > -- > Bob Simms > Senior Learning Consultant > QA - transforming performance through learning > www.qa.com >  
Other interesting topics
How to Enqueue Messages With Service Broker in a Timely Fashion
Activity Monitor not showing Database names Unable to access the tape for database backup purpose Maintenance did not delete old files Raid levels Create Database on the server Upgrading from SQL Express to SQL Enterprise share Template location for SSMS using profiler to capture errors Rolling back bcp takes forever. Shouldn't. |
|||||||||||||||||||||||
