forked from dsccommunity/SqlServerDsc
-
Notifications
You must be signed in to change notification settings - Fork 0
/
2-RevokeDatabasePermissions.ps1
46 lines (40 loc) · 1.44 KB
/
2-RevokeDatabasePermissions.ps1
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
<#
.DESCRIPTION
This example shows how to ensure that the user account CONTOSO\SQLAdmin
hasn't "Select" and "Create Table" SQL Permissions for database "AdventureWorks".
#>
Configuration Example
{
param
(
[Parameter(Mandatory = $true)]
[System.Management.Automation.PSCredential]
$SqlAdministratorCredential
)
Import-DscResource -ModuleName 'SqlServerDsc'
node localhost
{
SqlDatabasePermission 'RevokeGrant_SqlDatabasePermissions_SQLAdmin'
{
Ensure = 'Absent'
Name = 'CONTOSO\SQLAdmin'
DatabaseName = 'AdventureWorks'
PermissionState = 'Grant'
Permissions = @('Connect', 'Update')
ServerName = 'sqltest.company.local'
InstanceName = 'DSC'
PsDscRunAsCredential = $SqlAdministratorCredential
}
SqlDatabasePermission 'RevokeDeny_SqlDatabasePermissions_SQLAdmin'
{
Ensure = 'Absent'
Name = 'CONTOSO\SQLAdmin'
DatabaseName = 'AdventureWorks'
PermissionState = 'Deny'
Permissions = @('Select', 'CreateTable')
ServerName = 'sqltest.company.local'
InstanceName = 'DSC'
PsDscRunAsCredential = $SqlAdministratorCredential
}
}
}