Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2005 Forums
 SQL Server Administration (2005)
 dbcreator server role

Author  Topic 

kevin_m
Starting Member

3 Posts

Posted - 2008-10-16 : 11:44:23
Hi all,

Easy question...does the dbcreator server role allow the user to modify/alter/delete any existing or future DB's on the server, or just the ones that particular user creates?


We have an app requiring this role for the user, but I want to make certain it cannot harm other DB's as this is a shared SQL instance.

sodeep
Master Smack Fu Yak Hacker

7174 Posts

Posted - 2008-10-16 : 12:51:30
http://www.sqlservercentral.com/articles/Administering/sqlserversecurityfixedroles/1163/
Go to Top of Page

kevin_m
Starting Member

3 Posts

Posted - 2008-10-16 : 13:00:38
"The dbcreator fixed server role has to ability to create, drop, and restore databases. When a database is created, the creator automatically assumes ownership. Therefore, a login with the dbcreator role can initially assign permissions, create objects, and all the other things a db_owner fixed database role user can do for the databases they create (at least, until the ownership is changed)."

My question still is...does this mean the dbcreator has these abilities on ALL DB's on that server, or just the DB's he creates?
Go to Top of Page

sodeep
Master Smack Fu Yak Hacker

7174 Posts

Posted - 2008-10-16 : 13:14:56
Only database they create.
Go to Top of Page

kevin_m
Starting Member

3 Posts

Posted - 2008-10-16 : 13:50:24
Thanks!
Go to Top of Page

Peter99
Constraint Violating Yak Guru

498 Posts

Posted - 2010-02-02 : 12:48:25
A user with dbcreater role can delete other databases on that server.
Go to Top of Page
   

- Advertisement -