Add-DbaDbRoleMember View Source Ben Miller (@DBAduck) Windows, Linux, macOS Synopsis Adds database users or roles as members to database roles across SQL Server instances
Description Manages database security by adding users or roles as members to database roles, automating what would otherwise require manual T-SQL commands or SQL Server Management Studio clicks. This function handles membership validation to ensure the user or role exists in the database before attempting to add them, and checks existing membership to prevent duplicate assignments.
Add-DbaServerRoleMember View Source Shawn Melton (@wsmelton) Windows, Linux, macOS Synopsis Adds logins or server roles to server-level roles for SQL Server security administration.
Description Grants server-level role membership to SQL logins or nests server roles within other server roles. Use this command when setting up security permissions, implementing role-based access control, or managing server-level privileges across multiple SQL Server instances. Supports both built-in roles (sysadmin, dbcreator, etc.) and custom server roles, so you don’t have to manually assign permissions through SSMS or T-SQL scripts.
Export-DbaDbRole View Source Patrick Flynn (@sqllensman) Windows, Linux, macOS Synopsis Generates T-SQL scripts for database role definitions with their complete permission sets and schema ownership
Description Creates executable T-SQL scripts that fully define database roles including CREATE ROLE statements, granular object permissions, and schema ownership assignments. The output captures every permission granted to custom roles across all database securables like tables, schemas, assemblies, and certificates so you can recreate identical security configurations in other environments.
Export-DbaServerRole View Source Patrick Flynn (@sqllensman) Windows, Linux, macOS Synopsis Generates T-SQL scripts for server-level roles including permissions and memberships
Description Creates complete T-SQL scripts that can recreate server-level roles along with their permissions and memberships on another instance. This eliminates the need to manually recreate security configurations during server migrations or disaster recovery scenarios. The function queries sys.server_permissions to capture all role permissions (GRANT, DENY, REVOKE) and generates the appropriate T-SQL statements for role creation and member assignments.
Get-DbaDbRole View Source Ben Miller (@DBAduck) Windows, Linux, macOS Synopsis Retrieves database roles from SQL Server instances for security auditing and permission analysis.
Description Retrieves all database roles (both fixed and custom) from one or more SQL Server databases, returning detailed role information for security audits and compliance reporting. This function examines the roles collection in each accessible database, allowing you to identify custom roles, exclude built-in fixed roles, or focus on specific roles by name.
Get-DbaDbRoleMember View Source Klaas Vandenberghe (@PowerDBAKlaas) Windows, Linux, macOS Synopsis Retrieves all users and nested roles that are members of database roles across SQL Server instances
Description This function enumerates the membership of database roles, showing which users and nested roles belong to each role. Essential for security audits, permission troubleshooting, and compliance reporting, it reveals the complete role hierarchy within your databases. By default, system users are excluded to focus on business-relevant accounts, but you can include them for comprehensive security reviews.
Get-DbaServerRole View Source Shawn Melton (@wsmelton) Windows, Linux, macOS Synopsis Retrieves server-level security roles and their members from SQL Server instances.
Description Retrieves all server-level security roles from SQL Server instances, including role members, creation dates, and ownership details. This function helps DBAs audit server-level permissions, identify role membership for compliance reporting, and distinguish between built-in fixed roles (like sysadmin, serveradmin) and custom user-defined roles. Supports filtering to specific roles or excluding fixed roles to focus on custom security configurations.
Get-DbaServerRoleMember View Source Klaas Vandenberghe (@PowerDBAKlaas) Windows, Linux, macOS Synopsis Retrieves server-level role memberships for security auditing and compliance reporting.
Description Returns detailed information about which logins are members of server-level roles like sysadmin, dbcreator, and securityadmin. Essential for security audits, compliance reviews, and troubleshooting permission issues. Shows both the role assignments and provides access to the underlying SMO objects for further analysis. Supports filtering by specific roles or logins to focus on particular security concerns.
New-DbaDbRole View Source Claudio Silva (@ClaudioESSilva), claudioessilva.eu Windows, Linux, macOS Synopsis Creates new database roles in one or more SQL Server databases.
Description Creates custom database roles for implementing role-based security in SQL Server databases. This function handles the creation of user-defined database roles that can later be granted specific permissions and have users or other roles assigned to them. You can create the same role across multiple databases for consistency, and optionally specify a custom owner instead of the default dbo.
New-DbaServerRole View Source Claudio Silva (@ClaudioESSilva), claudioessilva.eu Windows, Linux, macOS Synopsis Creates custom server-level roles on SQL Server instances for role-based access control.
Description Creates new server-level roles on one or more SQL Server instances, allowing you to implement custom security frameworks without manually using SSMS or T-SQL. Server roles provide a way to group server-level permissions and assign them to logins, making it easier to manage security across your environment.
dbatools