Role Based Access for User Management [message #682566] |
Thu, 29 October 2020 02:24 |
jesuisantony
Messages: 166 Registered: July 2006 Location: Chennai
|
Senior Member |
|
|
Hi All,
We have a requirement to perform the user management (user creation, drop, role/privilege assignment) to be done by the L1 team. However, we do not want them to have the DBA access on the database.
Is that possible? We understand that "CREATE USER" privilege allows them to create the user account. But it does not allow the team to grant roles or other privileges to the DB accounts? How can this be achieved?
Regards,
Antony
|
|
|
|
|
Re: Role Based Access for User Management [message #682595 is a reply to message #682594] |
Sat, 31 October 2020 05:27 |
|
Michel Cadot
Messages: 68716 Registered: March 2007 Location: Saint-Maur, France, https...
|
Senior Member Account Moderator |
|
|
There is none.
Just a CREATE PROCEDURE in a privileged account containing the statements you want to execute from the parameters you give (after validating tham) then grant the EXECUTE privilege to the procedure to the accounts that need them.
|
|
|