Mange database accses

---1.suppose xyz campany hase database system.these system hase different

users with diffrent privlage as database adminstrtor
---professional,adiministrtor thedatabase according to the following
permission.
---instruction create manager _log by logged in using windowes
authuontication. the other remaning logins must be created by
--- logged in manager_log.
--A. create logins and assigen approprate roles
---logins permission
--manager_log --able to mange
evrything on database server
--dba_log ---able to mange security issues
--disigener_log ---able to create database
--encoder1_log --- nething to do bo server
--encoder2_log -- nething to do bo server
--encoder3_log -- nething to do bo server
--encoder4_log -- nething to do bo server

create login manager_log with password='123'

sp_addsrvrolemember 'manager_log','sysadmin'

create login dba_log with password='456'

sp_addsrvrolemember 'dba_log','securityadmin'

create login designer_log with password='789'

sp_addsrvrolemember 'designer_log','dbcreator'

create login encoder1_log with password='1010'

create login encoder2_log with password='1111'
create login encoder3_log with password='1212'
create login encoder4_log with password='1313'
---B CREATE USERS FOR COROSPONDING LOGIN RESPECTIVELY AND ASIGEIN APPROPRATE
ROLES.

---- users permission

----manager_usr --able to mange evrything on database
--dba_usr ---able to backup database
--disigener_usr ---able to create and drop tables and views
--encoder1_usr --- able to view and wite data from/into tbles
--encoder2_usr --able to view and wite data from/into tbles
--encoder3_usr -- able to view and wite data from/into tbles
--encoder4_usr -- able to view and wite data from/into tbles
create user manager_usr for login manager_log
sp_addrolemember 'db_owner','manager_usr'

create user dba_usr for login dba_log

sp_addrolemember 'db_backupoperator','dba_usr'

create user designer_usr for login designer_log

sp_addrolemember 'db_owner','designer_usr'
create user encoder1_usr for login encoder1_log
sp_addrolemember 'db_datawriter','encoder1_usr'

create user encoder2_usr for login encoder2_log

sp_addrolemember 'db_datawriter','encoder2_usr'

create user encoder3_usr for login encoder3_log

sp_addrolemember 'db_datawriter','encoder3_usr'

create user encoder4_usr for login encoder4_log

sp_addrolemember 'db_datawriter','encoder4_usr'
----C create role
---role ---encoder
---permission ---able to view and wite data from/into tbles
---members --- encoder1,encoder2,encoder3,encoder4
create role encoder
grant select,insert on student to encoder
sp_addrolemember 'encoder','encoder1_usr'
sp_addrolemember 'encoder','encoder2_usr'
sp_addrolemember 'encoder','encoder3_usr'
sp_addrolemember 'encoder','encoder4_usr'
---D make dba_user to grant delete and update to other users

grant delete,update on student to dba_usr with grant option

----E create windows login and make it to create database and view records
create login [admin-pc\standard] from windows
----2 remove members of database and server role.
sp_dropsrvrolemember 'manager_log','sysadmin'
sp_dropsrvrolemember 'dba_log','securityadmin'
sp_dropsrvrolemember 'designer_log','dbcreator'
----3. remuve role named encoder
drop role encoder
sp_droprolemember 'encoder','encoder1_usr'
sp_droprolemember 'encoder','encoder2_usr'
sp_droprolemember 'encoder','encoder3_usr'
sp_droprolemember 'encoder','encoder4_usr'
----4 rmove users and logins
drop login manager_log
drop user manager_usr

drop login dba_log

drop user dba_usr

drop login designer_log

drop user designer_usr

drop login encoder1_log

drop user encoder1_usr

drop login encoder2_log

drop user encoder2_usr

drop login encoder3_log

drop user encoder3_usr