forked from bulentgucuk/DBA-Scripts
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathCheck Azure SQL DB User and Role Membership.sql
More file actions
29 lines (24 loc) · 1.06 KB
/
Check Azure SQL DB User and Role Membership.sql
File metadata and controls
29 lines (24 loc) · 1.06 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
--List all users
SELECT name, type_desc, create_date, authentication_type_desc
FROM sys.database_principals
WHERE principal_id > 4
AND principal_id < 16384
AND name LIKE 'SVC%'
--List Database Roles and it's members
SELECT dp.name AS DatabaseRoleName, dp.type_desc, p.name AS DatabaseRoleMemberName, p.create_date
FROM sys.database_principals AS dp
INNER JOIN SYS.database_role_members AS drm ON dp.principal_id = drm.role_principal_id
INNER JOIN sys.database_principals AS P ON p.principal_id = drm.member_principal_id
WHERE p.name LIKE 'svcETL%' -- User is a member of all the roles in first row
ORDER BY dp.name, p.create_date;
--List permissions on schemas for database roles
SELECT state_desc, permission_name, 'ON', class_desc,
SCHEMA_NAME(major_id) AS SCHEMANAME,
'TO', USER_NAME(grantee_principal_id) AS UserGroup
FROM sys.database_permissions AS Perm
JOIN sys.database_principals AS Prin
ON Perm.major_id = Prin.principal_id AND class_desc = 'SCHEMA'
WHERE 1=1
--AND major_id = SCHEMA_ID('prodcopystg')
AND USER_NAME(grantee_principal_id) LIKE 'CI_ClientAccess%'
;