Home / server / Questions / 104898
Accepted
anD666
Asked: 2010-01-21 23:49:22 +0800 CST

SQL Server 2005 windows group permissions overriding individual server logins

  • 772

Hi,

I was wondering if someone knows a way round this. I have a database which needs to be accessed by a Windows Group with read only access. Some individuals in this group need write access.

I have added the group and then the individual logins and setup the permissions accordingly but the Windows Group seems to take precedence over the individual logins.

Does anyone know how to get around this?

Thanks

Andy

sql-server-2005 security permissions

1 Answers

  1. Best Answer

    Permissions are cumulative, with the exception that DENY rights will overwrite GRANTs.

    If you grant select to the group and deny update to the group, then grant update to the login they will not be able to update.

    Make sure that you haven't denied any rights to the group or to public.

    • 0