Can a SQL Server DBA be restricted from viewing the information in the database?

[emmablisa]

Can a SQL Server DBA be restricted from viewing the information in the database?

Because of some data privacy regulations, my company may need to have a DBA work with things like mirroring, index rebuilds, log shipping, clustering general system maintenance things like that while not having access to view the information in the database tables.

This sounds impossible to me, but is it at all possible to give someone access to do anything with a database except view the data included?

 

[JG2828]

Try adding the user to the db_denydatareader role.
"Members of the db_denydatareader fixed database role cannot read any data in the user tables within a database."

https://technet.microsoft.com/en-us/library/ms187916(v=sql.90).aspx

https://social.msdn.microsoft.com/F...datareader-dbdenydatareader?forum=sqlsecurity

 

[MacGyverS2000]

Have the DBA work on a test database with the same schema to get the command structure correct, then have someone else execute the commands on the real database.

Though having a DBA who is never allowed to look at the DB they're working on seems a bit short-sighted.

Dan - Owner

http://www.Hi-TecDesigns.com