How do I grant read access for a user to a databas

问题:

I want to grant access to a user to a specific database with read and write access. The user is already available in the domain but not in the DB.

So, how can I give them that access with creating a new user and password?

Someone told me that it can be done with only specifying the user, domain & the DB that you want to give the user the access to without needing to create a new user and password.

This is the old way that I was implementing. It works but it creates a new login and user rather than using the one that is available in the domain:

use DBName;
create login a_2 with password='Aa123';
create user a_2 for login a_2;
grant insert to a_2;
grant select to a_2;

回答1:

This is a two-step process:

1. you need to create a login to SQL Server for that user, based on its Windows account

   CREATE LOGIN [<domainName>\<loginName>] FROM WINDOWS;
   

2. you need to grant this login permission to access a database:

   USE (your database)
   CREATE USER (username) FOR LOGIN (your login name)
   

Once you have that user in your database, you can give it any rights you want, e.g. you could assign it the db_datareader database role to read all tables.

USE (your database)
EXEC sp_addrolemember 'db_datareader', '(your user name)'