Question

Consider a multi-user system running a database server, with a role-based access control (RBAC) system. One role in this system is Database Developer, for those responsible for creating and populating new databases and database applications. A second role is Database Administrator, responsible for managing the configuration of the database server and database user accounts. Make two lists, one for each of these two roles, with names of permissions that might be assigned to each role. Be as specific as possible. How many permissions do the two roles have in common? How many are different?

Answer 1

DATABASE DEVELOPER PERMISSIONS	DATABASE ADMINISTRATOR PERMISSIONS
ALTER ANY APPLICATION	CREATE SCHEMA
SELECT	CONNECT
ALTER ANY ASSEMBLY	ALTER ANY ROLE
SHOWPLAN	CREATE ROLE
ALTER ANY DATABASE DDL TRIGGER	ALTER ANY APPLICATION ROLE
UPDATE	VIEW DEFINATION
ALTER ANY DATASPACE	BACKUP DATABASE
ALTER ANY MESSAGE TYPE	BACKUP LOG
ALTER ANY SCHEMA	CHECKPOINT
CREATE AGGREGATE	ALTER ANY ASSEMBLY
CREATE ASSEMBLY	ALTER ANY KEY
CREATE DEFAULT	ALTER ANY CERTIFICATE
CREATE FULLTEXT CATALOG	ALTER ANY CONTRACT
CREATE TYPE	ALTER ANY USER
CREATE FUNCTION	ALTER ANY DATABASE DDL TRIGGER
CREATE VIEW	ALTER ANY DATABASE EVENT NOTIFICATION
CREATE PROCEDURE	CREATE FULLTEXT CATALOG
CREATE ROLE	ALTER ANY DATASPACE
DELETE	ALTER ANY MESSAGE TYPE
CREATE RULE	ALTER ANY ROUTE
CREATE SCHEMA	ALTER ANY SCHEMA
EXECUTE	ALTER ANY SERVICE
CREATE SERVICE	REFERENCES
INSERT	CHECKPOINT
CREATE SYNONYM	CREATE AGGREGATE
REFERENCES	CREATE DEFAULT
CREATE TABLE	CREATE FUNCTION
CREATE DATABASE DDL EVENT NOTIFICATION	CREATE PROCEDURE
CREATE XML SCHEMA COLLECTION	CREATE QUEUE
	CREATE XML SCHEMA COLLECTION
	UPDATE
	CREATE TABLE
	CREATE TYPE
	CREATE VIEW
	SELECT
	GRANT READ, WRITE PERMISSIONS TO USERS

Total 25 permissions are similar.

Database Developer have 4 different permissions.

Database Administrator have 11 different permissions.