Role Properties

Use the Role Properties window to set passwords, assign logins to roles, set permissions, hierarchically map roles, and set roles as mutually exclusive.

Option	Role Properties
General	Password – the system security officer can set or expire a password for a role.
Logins	Login – add or remove logins assigned to a role.
Login Profile	Login Profiles – add or remove login profiles assigned to a role.
Hierarchy	Create roles that are hierarchically mapped or aliased to another role.
Exclusivity	Control privileges of roles by defining the roles as mutually exclusive.
Command Permissions	Grant or revoke command permissions for the selected role.
Object Permissions	Grant or revoke object permissions and predicated privileges for a selected role.
Privileges	Grant or revoke system privileges to roles at the server or database level.

Assigning Logins to a Role
Assign one or more logins to a role.
Removing Logins Assigned to a Role
Remove login accounts assigned to roles.
Assigning Login Profiles to a Role
Assign a login profile to a role.
Removing Login Profiles Assigned to a Role
Remove login profiles currently assigned to a role.
Setting Command Permissions for a Role
Manage login account privileges by granting command permissions to a selected role.
Managing Mutually Exclusive Roles
Use mutually exclusive roles to prevent users from being granted different roles, or activating two different roles.
Creating Role Hierarchy
Roles can be granted hierarchically to manage permissions or privileges for one or more logins.
Granting Privileges to a Role
Grant system privileges to roles at the server or database level.
Revoking Privileges from a Role
Revoke system privileges from roles.
Granting Object Permissions to a Role
Use object access permissions to regulate the use of specific commands that access specific database objects.
Revoking Object Permission from a Role
Revoke database object permissions from a role.

Parent topic: Manage Roles