SQL Server emergency? Email pinal@sqlauthority.com with URGENT in the subject line.

Effective Permissions in SQL Server: When GRANT, DENY and REVOKE Meet

Effective permissions are what a user can do after every GRANT, DENY and REVOKE has been added together. This post follows one user through eight statements, with a role, a direct DENY and a direct GRANT, and checks the result after each step with HAS_PERMS_BY_NAME. It then shows how to take away one ability from a user who holds CONTROL. Every result comes from SQL Server 2025.

Continue Reading