dbcc commands are either:
Database-specific – dbcc commands such as checkalloc and checkstorage that execute on a particular target database. Although these commands are database-specific, only System Administrators can grant or revoke them.
Server-wide – dbcc commands such as tune that are effective server-wide and are not associated with any particular database. These commands are granted server-wide by default and are not associated with any database.
System Administrators can allow users to execute the grant dbcc command in all databases by making them valid users in the master database. However, it may be more convenient to allow grant dbcc to roles instead of individual users, since this allows users to use databases as a “guest” user instead of requiring that they each be added manually to the database.
From a security administration perspective, System Administrators may prefer to grant permission to execute database-specific dbcc commands server-wide. For example, you can set a grant dbcc checkstorage command on all databases to a user-defined role called storage_admin_role, thereby eliminating the need to set grant dbcc checkstorage to storage_admin_role in every database.
