To easily manage the permissions on your server, SQL Server provides several roles, which are security principals that group other principals. Roles are like groups in the Microsoft Windows operating system.
Server-level roles are also named fixed server roles because you cannot create new server-level roles. Server-level roles are server-wide in their permissions scope.
You can add SQL Server logins, Windows accounts, and Windows groups into server-level roles. Each member of a fixed server role can add other logins to that same role.
The following table shows the server-level roles and their capabilities.
|
Server-level role name
|
Description
|
|---|
|
sysadmin
|
Members of the sysadmin fixed server role can perform any activity in the server.
|
|
serveradmin
|
Members of the serveradmin fixed server role can change server-wide configuration options and shut down the server.
|
|
securityadmin
|
Members of the securityadmin fixed server role manage logins and their properties. They can GRANT, DENY, and REVOKE server-level permissions. They can also GRANT, DENY, and REVOKE database-level permissions. Additionally, they can reset passwords for SQL Server logins.
|
|
processadmin
|
Members of the processadmin fixed server role can end processes that are running in an instance of SQL Server.
|
|
setupadmin
|
Members of the setupadmin fixed server role can add and remove linked servers.
|
|
bulkadmin
|
Members of the bulkadmin fixed server role can run the BULK INSERT statement.
|
|
diskadmin
|
The diskadmin fixed server role is used for managing disk files.
|
|
dbcreator
|
Members of the dbcreator fixed server role can create, alter, drop, and restore any database.
|
|
public
|
Every SQL Server login belongs to the public server role. When a server principal has not been granted or denied specific permissions on a securable object, the user inherits the permissions granted to public on that object. Only assign public permissions on any object when you want the object to be available to all users.
|
For specific information about server-level role permissions, see .Permissions of Fixed Server Roles (Database Engine).
Working with Server-Level Roles
The following table explains the commands, views and functions for working with server-level roles.
Reference
Database-Level Roles
Concepts
Securing SQL Server
Other Resources
Security Catalog Views (Transact-SQL)
Security Functions (Transact-SQL)
Help and Information
Getting SQL Server 2008 Assistance
