forked from dsccommunity/SqlServerDsc
-
Notifications
You must be signed in to change notification settings - Fork 0
/
2-RevokeDatabasePermissions.ps1
42 lines (38 loc) · 1.41 KB
/
2-RevokeDatabasePermissions.ps1
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
<#
.DESCRIPTION
This example shows how to ensure that the user account CONTOSO\SQLAdmin
hasn't "Select" and "Create Table" SQL Permissions for database "AdventureWorks".
#>
Configuration Example
{
param(
[Parameter(Mandatory = $true)]
[System.Management.Automation.PSCredential]
$SqlAdministratorCredential
)
Import-DscResource -ModuleName SqlServerDsc
node localhost {
SqlDatabasePermission RevokeGrant_SqlDatabasePermissions_SQLAdmin
{
Ensure = 'Absent'
Name = 'CONTOSO\SQLAdmin'
Database = 'AdventureWorks'
PermissionState = 'Grant'
Permissions = 'Connect', 'Update'
ServerName = 'sqltest.company.local'
InstanceName = 'DSC'
PsDscRunAsCredential = $SqlAdministratorCredential
}
SqlDatabasePermission RevokeDeny_SqlDatabasePermissions_SQLAdmin
{
Ensure = 'Absent'
Name = 'CONTOSO\SQLAdmin'
Database = 'AdventureWorks'
PermissionState = 'Deny'
Permissions = 'Select', 'Create Table'
ServerName = 'sqltest.company.local'
InstanceName = 'DSC'
PsDscRunAsCredential = $SqlAdministratorCredential
}
}
}