Find particular database role permission on all the databases of an instance

Question

Hi Team,
I want to find particular database role permission on all the databases of a instance.
Example: 50 databases are running on an instance. I want to find datareader permission of ABCDE account, on which of the databases it exist?
Please provide me a customized script to find it.
Thanks
Kumar

Answer 1

Hi K735,
According to your description, you want to find databases where a specific database role of a specific user exists. To do this, you could execute the stored procedure below by proving a value for each of the two parameters (@databaseRole, @user)  to
specify the database role and the user as the following example: execute findDatabaseRole 'db_datareader', 'testUser'
USE master
GO
CREATE PROCEDURE dbo.findDatabaseRole
@databaseRole VARCHAR(200),
@user VARCHAR(250)
AS
DECLARE @DBuser_sql VARCHAR(4000)
DECLARE @DBuser_table TABLE
AssociatedDatabaseRole VARCHAR(200),
DBName VARCHAR(200),
UserName VARCHAR(250),
LoginType VARCHAR(500)
INSERT @DBuser_table
EXEC sp_MSforeachdb @command1='SELECT USER_NAME(b.role_principal_id) AS AssociatedDatabaseRole, "[?]" AS DBName, a.name AS Name,
a.type_desc AS LoginType FROM [?].sys.database_principals a
, [?].sys.database_role_members b where a.principal_id=b.member_principal_id and
a.sid NOT IN (0x01,0x00) AND a.sid IS NOT NULL AND a.type NOT IN ("C")
AND a.is_fixed_role <> 1 AND a.name NOT LIKE "##%" AND "?" NOT IN ("master","msdb","model","tempdb")
ORDER BY Name'
SELECT AssociatedDatabaseRole, DBName,UserName,LoginType
FROM @DBuser_table WHERE UserName=@user and AssociatedDatabaseRole=@databaseRole
group by AssociatedDatabaseRole, DBName,UserName,LoginType
GO
Regards,
Michelle Li