Server.Deny Method (ServerPermissionSet, array<String , Boolean)

Denies the specified set of permissions for the specified grantees and other users that the grantee granted the specified set of permissions on the instance of SQL Server.

Namespace:  Microsoft.SqlServer.Management.Smo
Assembly:  Microsoft.SqlServer.Smo (in Microsoft.SqlServer.Smo.dll)

Syntax

'Declaration
Public Sub Deny ( _
    permission As ServerPermissionSet, _
    granteeNames As String(), _
    cascade As Boolean _
)
'Usage
Dim instance As Server 
Dim permission As ServerPermissionSet 
Dim granteeNames As String()
Dim cascade As Boolean

instance.Deny(permission, granteeNames, _
    cascade)

public void Deny(
    ServerPermissionSet permission,
    string[] granteeNames,
    bool cascade
)

public:
void Deny(
    ServerPermissionSet^ permission, 
    array<String^>^ granteeNames, 
    bool cascade
)

member Deny : 
        permission:ServerPermissionSet * 
        granteeNames:string[] * 
        cascade:bool -> unit

public function Deny(
    permission : ServerPermissionSet, 
    granteeNames : String[], 
    cascade : boolean
)

Parameters

• permission
  Type: Microsoft.SqlServer.Management.Smo.ServerPermissionSet
  A ServerPermissionSet object value that specifies the set of permissions.

• granteeNames
  Type: array<System.String[]
  A String array that specifies a list of grantees to be denied the specified set of permissions.

• cascade
  Type: System.Boolean
  A Boolean property that specifies whether users, to whom the grantee granted the specified set of permission, are also denied access to the specified set of permissions on the instance of SQL Server.If True, the grantee and users to which the grantee granted the specified set of permissions are all denied the specified set of permissions.If False, only the grantee is denied the specified set of permissions.

Examples

Visual Basic

'Connect to the local, default instance of SQL Server.
Dim svr As Server
svr = New Server()
'Define a ServerPermissionSet that contains permission to Create Endpoint and Alter Any Endpoint.
Dim sps As ServerPermissionSet
sps = New ServerPermissionSet(ServerPermission.CreateEndpoint)
sps.Add(ServerPermission.AlterAnyEndpoint)
'This sample assumes that the grantee already has permission to Create Endpoints. 
'Enumerate and display the server permissions in the set for the grantee specified in the vGrantee string variable.
Dim spis As ServerPermissionInfo()
spis = svr.EnumServerPermissions(vGrantee, sps)
Dim spi As ServerPermissionInfo
Console.WriteLine("=================Before revoke===========================")
For Each spi In spis
    Console.WriteLine(spi.Grantee & " has " & spi.PermissionType.ToString & " permission.")
Next
Console.WriteLine(" ")
'Remove a permission from the set.
sps.Remove(ServerPermission.CreateEndpoint)
'Revoke the create endpoint permission from the grantee.
svr.Revoke(sps, vGrantee)
'Enumerate and display the server permissions in the set for the grantee specified in the vGrantee string variable.
spis = svr.EnumServerPermissions(vGrantee, sps)
Console.WriteLine("=================After revoke============================")
For Each spi In spis
    Console.WriteLine(spi.Grantee & " has " & spi.PermissionType.ToString & " permission.")
Next
Console.WriteLine(" ")
'Grant the Create Endpoint permission to the grantee.
svr.Grant(sps, vGrantee)
'Enumerate and display the server permissions in the set for the grantee specified in the vGrantee string variable.
spis = svr.EnumServerPermissions(vGrantee, sps)
Console.WriteLine("=================After grant=============================")
For Each spi In spis
    Console.WriteLine(spi.Grantee & " has " & spi.PermissionType.ToString & " permission.")
Next
Console.WriteLine("")

PowerShell

$srv = new-Object Microsoft.SqlServer.Management.Smo.Server("(local)")
$arg = [Microsoft.SqlServer.Management.Smo.ServerPermission]::CreateEndpoint

$sps = new-object Microsoft.SqlServer.Management.Smo.ServerPermissionSet([Microsoft.SqlServer.Management.Smo.ServerPermission]::CreateEndpoint)
$sps.Add([Microsoft.SqlServer.Management.Smo.ServerPermission]::AlterAnyEndpoint)
$spis = $srv.EnumServerPermissions("vGrantee", $sps)
Write-Host "=================Before revoke==========================="
Foreach ($spi In $spis)
{
   Write-Host $spi.Grantee "has" $spi.PermissionType " permission."
}
Write-Host " "
$sps.Remove([Microsoft.SqlServer.Management.Smo.ServerPermission]::CreateEndpoint)

See Also

Reference

Server Class

Deny Overload

Microsoft.SqlServer.Management.Smo Namespace

Other Resources

Granting, Revoking, and Denying Permissions

Managing Servers