AnsweredAssumed Answered

How to setup geodatabase in SQL Server with Windows AD-groups

Question asked by MOGrri on Oct 17, 2014
Latest reply on Oct 17, 2014 by asengupta-esristaff

Dear ESRI users,


My organisation is going to introduce a multi-editor database and would like to use OS-auth for this purpose, but  experience some difficulities in implementing this as desired.


We are using,
- SQL Server 2012, SP1
- ArcGIS 10.2.1


Below roles (AD-groups preferable) need access to the database,
- GISOWNER - permission to create tabels/feature classes.
- GISEDITOR - permission to edit/update/delete features, but not create/delete tabel or feature classes.
- GISREADER - permission to view/select data in tabels and feature classes.

What will be best practice for this setup?


Our main struggle is with GISOWNER - assigning a Windows AD-user works well, but assigning a AD-group results in featureClasses and tables created in user-schemas for each member of that AD-group rather than a shared default schema, fx. GISOWNER.featureClassName.

According to documentation on SQL Server, this issue with default schema for AD-Groups was fixed with SQL Server 2012 - maybe not implemented in ArcGIS 10.2.1?



Best regards,