Microsoft SQL Server Database permissions
Remarks
Basic Syntax:
{GRANT| REVOKE | DENY} {PERMISSION_NAME} [ON {SECURABLE}] TO {PRINCIPAL};
- {GRANT| REVOKE | DENY} - What you're trying to accomplish
- Grant: "Give this permission to the stated principal"
- Revoke: "Take this permission away from the stated principal"
- Deny: "Make sure the stated principal never has this permission (i.e. "
DENY SELECT" means that regardless of any other permissions,SELECTwill fail for this principal)
- PERMISSION_NAME - The operation that you're attempting to affect. This will depend on the securable. For instance, it doesn't make sense to
GRANT SELECTon a stored procedure. - SECURABLE - The name of the thing on which you're trying to affect permissions on. This is optional. Saying
GRANT SELECT TO [aUser];is perfectly acceptable; it means "for any securable for which theSELECTpermission makes sense,GRANTthat permission". - PRINCIPAL - For whom you are trying to affect permissions. At a database level, this can be a role (application or database) or user (mapped to a login or not) for example.
