Who Owns Your Databases?

Right now we have owners set to whoever creates the databases for most databases, but there are a few owned by sa.  I'm thinking how great it would be to consolidate this.  To this end, I've created a database owner domain account and added it as a SQL server login.  The login only has the public server role.  In a move common with things I typically do, going overboard, I have denied this accounts ability to connect to the server and disabled it.

So far things seem to be going smoothly.  One thing to note is that if you are planning on using unsafe clr assemblies the owner will need to have unsafe permissions....

This seems like a fairly secure database owner setup to me.  I mentioned it to someone and he asked if we just had a security problem...  No, that's the point, we don't want one.  What do you think?

If things work out, we'll be looking for a way to automatically set the owner.  I'm guessing it'll need to be a server level trigger, because I don't see anything in model that let's you assign a default owner...

Feedback greatly appreciated.

1 Comment

Comments have been disabled for this content.