topic Re: Difference user account in Data Management Questions

Difference user account

NguyenThachThao — Mon, 23 Sep 2013 01:43:15 GMT

Dear all!

I have two user account: one is created by sa login and another one is created by sde login. What are they diffrence about?

Help me.

Re: Difference user account

VinceAngelo — Mon, 23 Sep 2013 09:25:45 GMT

Assuming the SDE user has necessary permissions, no difference at all. But I never
grant the SDE user more than the minimum necessary permissions.

- V

Re: Difference user account

LeoDonahue — Mon, 23 Sep 2013 20:21:50 GMT

If you so choose, you can load data into your geodatabase using the sa(dbo) account. You should never load data into your geodatabase using the sde account.

Re: Difference user account

NguyenThachThao — Tue, 24 Sep 2013 00:29:07 GMT

Why shouldn't we load data into your geodatabase using the sde account?

Re: Difference user account

VinceAngelo — Tue, 24 Sep 2013 01:36:37 GMT

Because it's too easy to corrupt and/or destroy your geodatabase.

Because the password for the SDE user should be closely held.

Because the SDE user should be limited from too much permission
while running as a service.

Best practice is to establish one or more data ownership accounts, then
use roles to grant necessary accesses to other login/user/schemas,
so that only the minimum necessary permissions are granted to
non-owners.

- V

Re: Difference user account

NguyenThachThao — Tue, 24 Sep 2013 01:54:34 GMT

I can understand what you said but I haven't experience in security for data yet. I will learn more!

Thanks for your help!