Difference user account

772
5
09-22-2013 06:43 PM
NguyenThachThao
New Contributor III
Dear all!

I have two user account: one is created by sa login and another one is created by sde login. What are they diffrence about?

Help me.
0 Kudos
5 Replies
VinceAngelo
Esri Esteemed Contributor
Assuming the SDE user has necessary permissions, no difference at all.  But I never
grant the SDE user more than the minimum necessary permissions.

- V
0 Kudos
LeoDonahue
Occasional Contributor III
If you so choose, you can load data into your geodatabase using the sa(dbo) account.  You should never load data into your geodatabase using the sde account.
0 Kudos
NguyenThachThao
New Contributor III
Why shouldn't we load data into your geodatabase using the sde account?
0 Kudos
VinceAngelo
Esri Esteemed Contributor
Because it's too easy to corrupt and/or destroy your geodatabase.

Because the password for the SDE user should be closely held.

Because the SDE user should be limited from too much permission
while running as a service.

Best practice is to establish one or more data ownership accounts, then
use roles to grant necessary accesses to other login/user/schemas,
so that only the minimum necessary permissions are granted  to
non-owners.

- V
0 Kudos
NguyenThachThao
New Contributor III
I can understand what you said but I haven't experience in security for data yet. I will learn more!

Thanks for your help!
0 Kudos