DENY (TSQL Statement)

denies permission(s) ON the specified object TO the specified principal(s).

Syntax

DENY <permission> [,... n]
    ON [schema_name .] object_name
    TO principal [,... n]

<permission> ::= SELECT | UPDATE | INSERT | DELETE

Arguments

<permission>
is a permission that can be denied on the object.
[schema_name.]object_name
is the object on which the permission(s) will be denied.
principal
is the name of a user or a role to which the permission(s) will be denied.

Remarks

Only sa or dbo is allowed to execute this statement.

To remove a “deny permission”, use REVOKE permissions.

The command SHOW PERM U displays the list of users and roles, and their permissions.

The command SHOW PERM T displays the list of tables, and the permissions on them.

Examples

DENY SELECT, UPDATE ON clients TO igor, alice;