topic Re: Do all geodatabase schema objects require access through the PUBLIC server role? in Geodatabase Questions

Do all geodatabase schema objects require access through the PUBLIC server role?

Anonymous User — Tue, 26 Oct 2021 12:57:18 GMT

Looking at a geodatabase in Azure SQL database, the PUBLIC server role has permissions on many geodatabase objects, including INSERT and DELETE on some SDE_* tables, and EXECUTE on data modifying stored procedures.

What this means is that any user added to the database has these privileges by default. Is this necessary for the proper functioning of the geodatabase and, if not, which permissions can be removed from the PUBLIC user role?

Re: Do all geodatabase schema objects require access through the PUBLIC server role?

Asrujit_SenGupta — Thu, 28 Oct 2021 06:56:38 GMT

The below link will partially answer your question:

How To: Repair permissions on ArcSDE repository tables and objects for the public role in ArcSDE for Oracle geodatabases

So, in short, these are necessary but can also be revoked from PUBLIC role and granted to other users separately. Probably try it out on a test database and make sure everything is working first.

Re: Do all geodatabase schema objects require access through the PUBLIC server role?

Anonymous User — Thu, 28 Oct 2021 13:09:32 GMT

Thank you, Asrujit. This is the best information that I've seen on this.