.
Task |
Required role |
Command or procedure |
Database |
---|---|---|---|
Create new logins, assign passwords, default databases, default language, and full name |
System security officer |
sp_addlogin |
Any database |
Create groups |
Database owner or system administrator |
sp_addgroup |
User database |
Create and assign roles |
System security officer |
create role, grant role |
Master database |
Add users to database and assign groups |
Database owner or system administrator |
sp_adduser |
User database |
Alias users to other database users |
Database owner or system administrator |
sp_addalias |
User database |
Grant groups, users, or roles permission to create or access database objects and run commands |
Database owner, system administrator, system security officer, or object owner |
grant |
User database |