Microsoft SQL Server (MSSQL) Configuration
3 min
Purpose
In MSSQL, the aim is to create a login and user with minimal read privileges, such as VIEW SERVER STATE, and optionally the ability to view object definitions if required.
Grant Permissions
-- Create a login at the server level
CREATE LOGIN [ username ] WITH PASSWORD = ’<password >’;
-- Grant server - level permission to view server state
GRANT VIEW SERVER STATE TO [ username ];
-- Create a user under each required database
USE [ database_name ];
CREATE USER [ username ] FROM LOGIN [ username ];
-- Optionally , grant permission to view definitions (e.g. , for
masking )
GRANT VIEW DEFINITION TO [ username ];Testing Permissions
Connect as [username] and execute:
SELECT * FROM sys . dm_os_sys_info ;If [username] can see the system info, it confirms that VIEW SERVER STATE is functioning correctly.