Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
| Author |
Topic |
|
dmaxj
Posting Yak Master
174 Posts |
 Posted - 2010-01-30 : 00:58:23
|
| A situation came up between me and another DBA. Our organization uses MS Active Directory. There is a developer that wants to connect to a database called TripleCCC (read only) on an SQL Server 2005 using an open source tool called Talend.I am suggesting that we add the users Active Directory account name to the data reader Role to the instance that contains the TripleCCC database. The other DBA wants to create an SQL Server account with data reader privileges for the developer.Which method is suggested?Regards |
|
|
DaleTurley
Yak Posting Veteran
76 Posts |
Posted - 2010-01-30 : 06:40:38
|
quote:
Originally posted by dmaxj
A situation came up between me and another DBA. Our organization uses MS Active Directory. There is a developer that wants to connect to a database called TripleCCC (read only) on an SQL Server 2005 using an open source tool called Talend.I am suggesting that we add the users Active Directory account name to the data reader Role to the instance that contains the TripleCCC database. The other DBA wants to create an SQL Server account with data reader privileges for the developer.Which method is suggested?Regards
The Windows router if you can. I would just give the user login, and then create a user in the database TripleCCC and add the user to datareader role in the database as appose to the server. |
 |
|
|
DaleTurley
Yak Posting Veteran
76 Posts |
Posted - 2010-01-30 : 06:41:43
|
| Sorry, Windows *route* |
|
|
|
russell
Pyro-ma-ni-yak
5072 Posts |
Posted - 2010-01-30 : 09:05:59
|
| Agree with Dale."I am suggesting that we add the users Active Directory account name to the data reader Role to the instance that contains the TripleCCC database"Should do it your way. Only give them db_datareader on the TripleCCC database |
|
|
|
jackv
Master Smack Fu Yak Hacker
2179 Posts |
Posted - 2010-01-30 : 10:20:40
|
| One of the benefits of the AD route is easier to manage user access centrally across all resources . For example , if they have access to multiple dbs\servers , you can control access swiftlyJack Vamvas--------------------http://www.ITjobfeed.com |
|
|
|
dmaxj
Posting Yak Master
174 Posts |
Posted - 2010-01-30 : 23:11:59
|
| Thanks for the input - I just won a steak dinner!WOO HOO!!! |
|
|
|
|
|
|
login privileges