Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
Author |
Topic |
kevin_m
Starting Member
3 Posts |
Posted - 2008-10-16 : 11:44:23
|
Hi all,Easy question...does the dbcreator server role allow the user to modify/alter/delete any existing or future DB's on the server, or just the ones that particular user creates?We have an app requiring this role for the user, but I want to make certain it cannot harm other DB's as this is a shared SQL instance. |
|
sodeep
Master Smack Fu Yak Hacker
7174 Posts |
Posted - 2008-10-16 : 12:51:30
|
http://www.sqlservercentral.com/articles/Administering/sqlserversecurityfixedroles/1163/ |
 |
|
kevin_m
Starting Member
3 Posts |
Posted - 2008-10-16 : 13:00:38
|
"The dbcreator fixed server role has to ability to create, drop, and restore databases. When a database is created, the creator automatically assumes ownership. Therefore, a login with the dbcreator role can initially assign permissions, create objects, and all the other things a db_owner fixed database role user can do for the databases they create (at least, until the ownership is changed)."My question still is...does this mean the dbcreator has these abilities on ALL DB's on that server, or just the DB's he creates? |
 |
|
sodeep
Master Smack Fu Yak Hacker
7174 Posts |
Posted - 2008-10-16 : 13:14:56
|
Only database they create. |
 |
|
kevin_m
Starting Member
3 Posts |
Posted - 2008-10-16 : 13:50:24
|
Thanks! |
 |
|
Peter99
Constraint Violating Yak Guru
498 Posts |
Posted - 2010-02-02 : 12:48:25
|
A user with dbcreater role can delete other databases on that server. |
 |
|
|
|
|