Overview

A user identifier (ID) identifies a user within a database. All permissions and ownership of objects in the database are controlled by the user account. User accounts are specific to a database; the xyz user account in the sales database is different from the xyz user account in the inventory database, even though both accounts have the same ID. User IDs are defined by members of the db_owner fixed database role.

A login ID by itself does not give a user permissions to access objects in any databases. A login ID must be associated with a user ID in each database before anyone connecting with that login ID can access objects in the databases. If a login ID has not been explicitly associated with any user ID in a database, it is associated with the guest user ID. If a database has no guest user account, a login cannot access the database unless it has been associated with a valid user account.

When a user ID is defined, it is associated with a login ID. For example, a member of the db_owner role can associate the Microsoft® Windows® 2000 login NETDOMAIN\Joe with user ID abc in the sales database and user ID def in the employee database. The default is for the login ID and user ID to be the same.

Adding a Database User

To add a new database user click the Create New User link located towards the upper right hand of the screen. You will then be prompted to select the SQL Server login that the new user will be associated to. You may also define the user name if you wish it to differ from the SQL Server login name.

Editing a Database User

You may add or remove database roles to or from a database user. You may also use SQL Enterprise Manager to determine granular permissions for a specific user.

Removing a Database User

On the database users view, click Delete to remove a database user.