Expanded securityadmin

Posted by user80652 on Stack Overflow See other posts from Stack Overflow or by user80652
Published on 2010-04-23T13:45:14Z Indexed on 2010/04/24 6:43 UTC
Read the original article Hit count: 126

I'm aware that sysadmin is documented as the server role necessary for creating logins (SQL/Windows-integrated); nevertheless, I'm tasked to find out if there's any other server role (built-in or otherwise) that can be used.

To be specific, I'm looking to setup one or two logins with access to create logins, create [database] users, assign users to [database] roles. Potentially reset passwords, but most of the logins are Windows-integrated and it's not necessary. Cannot have access to data at all, nor can these logins have rights to update tables nor create/update roles.

Seems my only options so far are to set these 2 logins with securityadmin server role and for the specific databases, configure with db_securityadmin and db_accessadmin... but this configuration doesn't allow for creating logins.

© Stack Overflow or respective owner

Related posts about sql-server-2005

Related posts about security-roles