question

TanveerAhmed-4693 avatar image
0 Votes"
TanveerAhmed-4693 asked AnuragSharma-MSFT answered

How to Managing SQL Server Permissions in Azure

A deny will override a grant. This means that if a user is denied permission they cannot inherit a grant from another source

https://isqlplus.com/sql-server/sql-server/managing-permissions/

-Scott


azure-sqldatabase-edge
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

AnuragSharma-MSFT avatar image
0 Votes"
AnuragSharma-MSFT answered

Hi @TanveerAhmed-4693, welcome to Microsoft Q&A forum.

To understand the statement provided above, lets take an example. Suppose we have created a login and corresponding user, and then created a role which has select permission on the database. We map the user to this role, which provides the user select permission to the database. Now instead of providing deny to role we created, we directly provide deny to the user, then user will not have permission to the database anymore.

if we do the other way round, like providing the deny permission on the role and then map the role with user, and then provide grant to the user again. Then also Deny will override grant and user would not have permission to the database.

You can refer to below example for this details:

Deny and Grant

Please let us know if this is your query or else we can discuss further on the same.



· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @TanveerAhmed-4693, please let us know if you need any other details on the same.

0 Votes 0 ·