CODEWITHSUNDEEP
sql-serverpermissions
Lenoxus
Lenoxus

Reputation: 645

In Microsoft SQL Server, what's the difference between not checking "Grant" and checking "Deny"?

For each database, I can set user securables by checking and unchecking Grant, With Grant, and Deny. Grant and Deny can't be checked at the same time, which makes sense. But they can both be unchecked. What does this mean? Why isn't it like a radio button between the two?

Upvotes: 0

Views: 61

Answers (1)

podiluska
podiluska

Reputation: 51504

When you don't grant a permission, the user inherits permissions from other groups that they are a member of.

When you deny a permission, you prevent that inheritance from applying to that permission.

Upvotes: 1

Related Questions