Sort Database Permissions By Blast Radius

Sort each database permission into the capability bucket it belongs in. Owner or admin Writer Reader Break-glass Can ALTER TABLE and grant permissions on the billing schema. Can insert and update rows in orders but cannot change schema. Can select from a masked customer support view only. Time-bound role that can disable accounts during a security incident. Can create extensions and manage replication slots. Can update ETL staging tables during the nightly load. Can select raw payroll tables for an approved audit window. Emergency credential stored in the vault and reviewed after each use.

Sign up free — one personalized lesson every day, matched to your role and goals.

Already have an account? Sign in