Download eBook (PDF) - Red Gate Software

2 – Data Classification and RolesCreating Database RolesUsing the sample HomeLending database, we will create the database rolesthat will allow us to manage access to data of varying sensitivity level. Theseroles will have the role names of Sensitive_high, Sensitive_mediumand Sensitive_low, which are based on our simplified sensitivity classes of"High", "Medium" and "Low".In order to do this, we will use the CREATE ROLE method from SQL ServerManagement Studio (SSMS). The following is an example of the syntax of thismethod:CREATE ROLE [Role Name] AUTHORIZATION [Role Owner]This method's arguments are:• Role name: This is the textual reference to the role. This is used toidentify the role when it is in use.• Role owner: This defines who owns the role. The owner can beeither a database user or another role.Defining the role owner argument is optional. If the role owner is not defined,the ownership will be assigned to the database user that created the role. It isthe Role Owner that can assign and alter membership of the role.The script in Listing 2-1 will create the roles in our sample database, accordingto our sensitivity classes. Please note that in order to successfully execute thisscript your login account will need to have CREATE ROLE permissions on thedatabase.USE HomeLending;GOCREATE ROLE Sensitive_low AUTHORIZATION db_owner;GOCREATE ROLE Sensitive_medium AUTHORIZATION db_owner;GOCREATE ROLE Sensitive_high AUTHORIZATION db_owner;GOListing 2-1: Creating the three sensitivity roles.42