manage database permissions privilege

Users with manage database permissions privilege can grant or revoke database-wide privileges except encryption key related privileges, which are managed by users with the manage security permissions privilege. See Table 8-4 for a list of these privileges.

Users with the manage database permissions privilege cannot grant or revoke the manage database permissions privilege to or from other users, including themselves.

When a database is created, the manage database permissions privilege is not initially granted to any role or user, including the Database Owner. A user with manage security permissions privilege must explicitly grant manage database permissions privilege to a database user before that user can grant or revoke database permissions.

Table 8-4: Privileges managed by manage database permissions privilege

alter any object owner

alter any table

create any default

create any function

create any index

create any object

create any procedure

create any rule

create any table

create any trigger

create any view

create default

create function

create procedure

create rule

create table

create trigger

create view

dbcc checkallock

dbcc checkcatalog

dbcc checkdb

dbcc checkindex

dbcc checkstorage

dbcc checktable

dbcc checkverify

dbcc fix_text

dbcc indexalloc

dbcc reindex

dbcc tablealloc

dbcc textalloc

delete any table

drop any default

drop any function

drop any object

drop any procedure

drop any rule

drop any table

drop any trigger

drop any view

execute any function

execute any procedure

identity_insert any table

identity_update any table

insert any table

manage abstract plans

manage any object permission

manage any statistics

manage any user

manage checkstorage

manage database

manage replication

references any table

reorg any table

report checkstorage

select any audit table (available only in sybsecurity)

select any system catalog

select any table

setuser

transfer any table

truncate any table

truncate any audit table (available only in sybsecurity)

update any table