Differences between Roles, Schemas, Users and Logins.

I need differences between Roles, Schemas, Users and Logins. Can anyone help me. Thanks in advance

Roles:
I think of creating roles in the database to group users of like
function.  Roles are granted certain permissions in the database.  You
should become familiar with the fixed database roles since these will be
utilized once you start creating users within the database.  Also, once
you see the type of permissions that are granted to each role, is makes
more sense.
Schema: there can be several schemas in a database,
which will house different types of objects such as tables, indexes,
stored procedures, functions,  etc.  Users own schemas.  Looking into
the AdventureWorks database illustrates this concept, with several
schemas like HR, Production, etc.
Login: Think about login as
gaining access to the SQL Server instance.  If a user account is not
granted any permissions within the instance, you basically just were
able to unlock the door and enter the room, by creating a user you then
grant access to the database objects or principals, and can begin to
work with them. 
Users:  Users own schemas, and as such will be
able to manipulate the objects they own.  Some of the manunipulations
are very permissive, such as creating tables, indexes, stored
procedures, functions, etc.  These are developers and administrators.
Users
are created and granted permissions for application use, which will
have select, update, insert, and delete and execute permissions  to a
finite set of objects in the schema, for which the application will need
to function properly.
In a client server database, as an
example, of the structure.  Roles were defined which provides the
permissions to the database objects in the database, which only has one
schema 'dbo'. One SQL server login was created with the same username,
and dbo is the assigned default schema, and the roles assigned to that
username. 
In the application, each specific user is given there own
"application" login which is mapped to the one defined sql server
login.
Ahsan Kabir Please remember to click Mark as Answer and Vote as Helpful on posts that help you. This can be beneficial to other community members reading the thread. http://www.aktechforum.blogspot.com/

Similar Messages

  • Difference between a Service user and Dailog user ?

    Hi All,
    Can anybody tell me the difference between a service user and a dailog user?
    Why can't we use a service user for BSP applications?
    We are on a 620 system and use bsp system login.
    With a dialog user it works, but when I switch this user to a service user the login returns an empty login screen.
    Thanks in advance.
    Rob

    A service user can only be used for background processing and communication within a system (such as RFC users for ALE, Workflow, TMS, and CUA). Dialog screens are not allowed for these users.
    Dialog users however have individual, interactive system access.
    [user types|http://help.sap.com/saphelp_nw70/helpdata/EN/3d/3272396ace5534e10000000a11405a/content.htm]

  • Difference between AD domain user and local user

    Hello, I think the title is self explanatory. I am trying to figure out difference between AD domain user and local user. SAP Help wasnt very helpful.
    Thanks.

    Hi,
    It's about where the user accounts are kept. Domain users are users that are entered into the domain users group on a domain controller. These domain users can be centrally managed at the server. Whereas the local users are the users created in the local system.
    In BPC, you can select users from either of them or in combination as well. However, If you want to make change in the local user credentials, you need to login to the system in which the user has been created and make the changes there. On the other hand, changes to domain users can be made from any domain connected machine with the right software and the necessary rights. The changes only need to be made once.
    Hope this helps.

  • Difference Between A Support User and Super User in CRM

    Hi All,
    May I know what is the difference between a support user and a super user in CRM?
    Please advice, thank

    HI Plaban
    not sure if you answered your own question here?
    Change User - by itself would allow update of address data, user parameters, defaults, etc
    Assign Object - as you mentioned roles and profiles.
    However, if assigning, I think you need to have both actions: change and assign
    I recall (ages ago) that change was only the user details and not the role or profiles. As a result, there were a few threads where people had to update the action for the request type of provisioning would not occur.
    This is something you could test
    Regards
    Colleen

  • Difference between Security Oracle user and Security User

    Hi All,
    Can anyone give me the difference between Security-> Oracle -> user and Security-> User in System Administrator Resp of oracle apps R12.
    Thanks,
    Mahesh.
    Edited by: 991854 on Mar 12, 2013 1:49 AM

    Can anyone give me the difference between Security-> Oracle -> user and Security-> User in System Administrator Resp of oracle apps R12.Security > Oracle > Register:
    Use this window to register an ORACLE username with Oracle E-Business Suite. An ORACLE username grants access privileges to the ORACLE database
    http://docs.oracle.com/cd/E18727_01/doc.121/e12893/T174296T174305.htm
    Security > Oracle > Data Group:
    A data group defines the mapping between Oracle E-Business Suite products and ORACLE database IDs. A data group determines which Oracle database accounts a responsibility's forms, concurrent programs, and reports connect to. See: Defining Data Groups, Oracle E-Business Suite System Administrator's Guide - Configuration.
    http://docs.oracle.com/cd/E18727_01/doc.121/e12843/T156458T156461.htm
    Security > User > Define:
    Use this window to define an Oracle E-Business Suite user. This user is an authorized user of Oracle E-Business Suite, and is uniquely identified by a username.
    http://docs.oracle.com/cd/E18727_01/doc.121/e12843/T156458T156461.htm
    Thanks,
    Hussein

  • What is the difference between WebLogic Server users and Portal users

    Hi All
    What is the difference between users created in the WebLogic server and those
    created from the webLogic Portal Admin console.
    - leo

    Hi Leo,
    The WebLogic server console allows you to create users in the File realm (
    http://e-docs.bea.com/wls/docs61/adminguide/cnfgsec.html#1057106 , "Defining
    Users" ).
    The WebLogic Portal Admin console creates Portal users in the alternate security
    realm that was written to store user/password in the Portal schema. This realm is
    com.bea.p13n.security.realm.RDBMSRealm. See the javadoc for RDBMSRealm at (
    http://edocs.bea.com/wlp/docs40/javadoc/wlp/com/bea/p13n/security/realm/RDBMSRealm.html
    For information on alternate security realms see
    http://e-docs.bea.com/wls/docs61/security/prog.html#1041025 , "Writing a Custom
    Security Realm".
    For information on the File realm see
    http://e-docs.bea.com/wls/docs61/ConsoleHelp/security.html , "Security" and also
    search the WLS 6.1 docs for "File realm" for lots of other references.
    Leo wrote:
    Hi All
    What is the difference between users created in the WebLogic server and those
    created from the webLogic Portal Admin console.
    - leo--
    Ture Hoefner
    BEA Systems, Inc.
    2590 Pearl St.
    Suite 110
    Boulder, CO 80302
    www.bea.com

  • In Request type, what is the difference between action 'Change user' and 'Assign object'

    Dear All,
    I have used only 'Assign Object' for my 'Change User' request type. But the standard request type has 'Change user'. So, could you suggest , what additional purpose does Change Object serve
    Regards
    Plaban

    HI Plaban
    not sure if you answered your own question here?
    Change User - by itself would allow update of address data, user parameters, defaults, etc
    Assign Object - as you mentioned roles and profiles.
    However, if assigning, I think you need to have both actions: change and assign
    I recall (ages ago) that change was only the user details and not the role or profiles. As a result, there were a few threads where people had to update the action for the request type of provisioning would not occur.
    This is something you could test
    Regards
    Colleen

  • Difference between Domain\Domain Users and Everyone Group in SharePoint

    Hi,
    In SharePoint 2013, is Everyone Group an AD group ? Please help with details.
    Thanks
    srabon

    Hi All,
    Domain Users, Authenticated Users, or Everyone
    Domain Users
    The Domain Users is the only real group of the 3 listed above.  By that I mean you can add and remove members from this group.  Domain Users is a Global Group in the domain, and it can only contain users that are members of same domain the Domain
    Users group resides in.  By default all users created in the domain are automatically members of this group.  However, the  default Guest account in the domain is NOT a member of Domain Users, instead it is placed in the Domain Guest group.
    Because Domain Users is generally considered the most secure group of the three listed above.
    Authenticated Users
    Authenticated Users was first introduced in Windows NT 4.0 SP3.  This is a built-in group and cannot be modified.  The Authenticated Users group contains users who have authenticated to the domain or a domain that is trusted by the computer domain. 
    Authenticated Users contains all manually created user accounts in all trusted domains regardless of whether they are a member of the Domain Users group or not.  Authenticated Users specifically does not contain the built-in Guest account, but will contain
    other users created and added to Domain Guests.The Authenticated Users group also includes the local computer account (computername$) and the built-in SYSTEM account. 
    Everyone group
    The Everyone group includes all members of the Domain Users, Authenticated Users group as well as the built-in Guest account, and several other Built-in security identifiers like SERVICE, LOCAL_SERVICE, NETWORK_SERVICE, etc.  NULL session connections (aka
    anonymous logon) used to be included in this group but were removed in Windows 2003.  This is a built-in group that cannot be modified.Because the Everyone group contains the Guest account, and several other Built-in security identifiers like SERVICE,
    LOCAL_SERVICE, NETWORK_SERVICE, etc. is generally considered the least secure of the three groups.
    Short Answer is there isn't much to worry about unless folks are logging I with a guest account or you have removed a bunch of folks from the domain users group
    -Ivan

  • Difference Between Database Schema and Database User Account ??

    First i would like to know what an Oracle Database schema exactly is ?
    And what is it for and also What is it's use ?
    Later the exact "Difference Between Database Schema and Database User Account".
    I googled about it but i'm unable to find out it's The difference,
    Please try to explain in a simple manner........
    Thank you very Much in Advance..........

    user13655582 wrote:
    Greate example. but i would like add one more point..
    a user is a schema and schema is a user. but when this applies to the user that he become a schema, only if he has got some objects. so we can say while creating the user which dosent contain any objects called simple user account but afterwords when he has got an objects then we can say its a schema as the above user has shown you through the exampleIt is just word-play. There is nothing in like a 'status' indicator to say "USER_A is just a user but USER_B has become a schema". Many people use the terms "user" and "schema" interchangeably, and some very good DBAs will insist this is correct. I don't disagree with them even though I usually try to make the distinction.
    In a typical application, all of the objects (tables, procedures, etc) that implement the app will be owned by a "application schema owner" - a user which exists for the sole purpose of owning the schema. Said user will have no privileges at all .. especially not CREATE SESSION. Except for possible maintenance activity no one ever actually connects as this user. User accounts are then given to actual humans who connect with their own accounts. The accounts have the necessary system and object privileges granted to them - via a role. One could also create a special account (let's call it APP_ADMIN) that is used for maintenance and batch operations within the application.

  • Difference between target schema and target user

    hi,
    Can anyone explain to me what is the difference between target schema and target user? examples will be more welcome then theoratical explanation.
    thanks so much

    In Oracle database schema and user is the same things (if you use general authentication by database).
    When used external authentication (for example with Windows domains/active directory) schema is a owner of database objects group and you should specify mapping between external usernames and schema to which this user has access when connects to database.
    For example:
    - windows domain user CORPDOMAIN\USER1 can connect to oracle database schema SCOTT;
    - windows domain user CORPDOMAIN\USER2 can connect to oracle database schema SCOTT;
    - windows domain user CORPDOMAIN\ADMIN can connect to oracle database schema SYSTEM;
    Oleg
    Message was edited by:
    tsiboleg

  • What is the difference between owb repository owner and repository user?

    what is the difference between owb repository owner and repository user?

    Hi,
    the repository owner has full rights to do every thing in the repository. There is only one repository owner.
    There may be multiple repository user for one of the following two purposes:
    1. When working in a team, each team member can be added as a different repository user and can have different grants assigned. That way you can also see who has deployed what objects or who has run a mapping.
    2. To be able to deploy into a database schema, that db user user has to be added as repository user as well. Make sure the "user is target schema" checkbox is checked.
    Regards,
    Carsten.

  • Difference between roles Administrator and Super admin

    Dear Portal Gurus,
    Pls let me know the difference between
    roles Administrator and Super admin
    Thanks.
    Jack

    Hi Jack,
    The Administrator is the role that has all the rights that includes J2ee engine rights too but an superadmin is the one that has the role to the three admin roles that are
    Content Admin
    User Admin
    System Admin
    THIS IS THE BASIC DIFFERENCE BETWEEN SUPERADMIN AND ADMINISTRATOR.
    PS:Reward Point Please
    Regards,
    Naveen Gupta

  • Difference between Roles and Profiles

    Hi,
    What is difference between Roles and Profiles?
    Thanx in advance..
    jitender

    Hi,
    It is a simple hierarchy level difference for grouping levels of authorization and the need avoid maintenance on a large number of individual authorizations on a user level.
    In SAP, authorizations are grouped together into profiles. These profiles usually represent some sort of functional access (i.e. Create customer master records). The profiles can then be allocated roles which group the individual functional access into a more abstract level of a role (i.e. accounts clerk). Roles are then assigned to users based on their specific responsibilities.
    More information is available on the help portal: http://help.sap.com
    Cheers,
    Mike.

  • Difference between roles and responsibilities of sd consultant?

    what is the difference between roles and responsibilities of sd consultant?

    Hi!
    "Roles and responsibilities" it is a term used by the consultant to tell about themselves. There is no difference between them. They co-related to each other. If you are given a ROLE for that certain RESPONSIBILITIES will be there.
    Hope you got cleared.
    Regards

  • Difference between role and profile

    Hi All,
    I need to know the difference between role and profile. Kindly let me also know
    relevant T codes. Can Profiles exist without roles? If yes please let me know how to create them.
    Thanks in Advance,
    Kalyan

    Kalyan,
    A role is basically a container of authorizations and other related items.
    A profile contains the actual authorizations once a role is generated.  In addition a profile can be created from scratch using the classical method--transaction SU02.  Roles are created via transaction PFCG.
    Also take a look at the following threads:
    Difference between Role & Profile
    Re: difference between profile and role
    Cheers,
    Ben

Maybe you are looking for