| Permission |
| Add extended procedures |
| Add member to bulkadmin |
| Add member to dbcreator |
| Add member to diskadmin |
| Add member to processadmin |
| Add member to securityadmin |
| Add member to serveradmin |
| Add member to setupadmin |
| Add member to sysadmin |
| Add/drop to/from db_accessadmin |
| Add/drop to/from db_backupoperator |
| Add/drop to/from db_datareader |
| Add/drop to/from db_datawriter |
| Add/drop to/from db_ddladmin |
| Add/drop to/from db_denydatareader |
| Add/drop to/from db_denydatawriter |
| Add/drop to/from db_owner |
| Add/drop to/from db_securityadmin |
| Add/drop/configure linked servers |
| All DDL but GRANT, REVOKE, DENY |
| ALTER DATABASE |
| BACKUP DATABASE |
| BACKUP LOG |
| BULK INSERT |
| CHECKPOINT |
| Complete SETUSER SQL user |
| Constraints on System tables |
| CREATE DATABASE |
| Create indices on system tables |
| Create/delete/modify system tables |
| dbcc change 'on' rules |
| dbcc checkalloc |
| dbcc checkdb |
| dbcc checkfilegroup |
| dbcc checkident |
| dbcc checktable |
| dbcc cleantable |
| dbcc dbreindex |
| dbcc dropcleanbuffers |
| dbcc freeproccache |
| dbcc inputbuffer |
| dbcc outputbuffer |
| dbcc pintable |
| dbcc proccache |
| dbcc setcpuweight |
| dbcc setioweight |
| dbcc show_statistics |
| dbcc showcontig |
| dbcc showoptweights |
| DBCC ShrinkDatabase |
| dbcc shrinkfile |
| dbcc traceon/off |
| dbcc updateusage |
| DELETE permission on any object |
| DENY |
| DISK INIT |
| DROP DATABASE |
| EXECUTE any procedure |
| Extend database |
| GRANT |
| Grant/deny/revoke CREATE DATABASE |
| INSERT permission on any object |
| KILL |
| Mark a stored procedure as startup |
| Raiserror With Log |
| Read the error log |
| RECONFIGURE |
| REFERENCES permission on any table |
| RESTORE DATABASE |
| RESTORE LOG |
| REVOKE |
| SELECT permission on any object |
| SHUTDOWN |
| sp_addalias |
| sp_addapprole |
| sp_addgroup |
| sp_addlinkedsrvlogin |
| sp_addlogin |
| sp_addrole |
| sp_addrolemember |
| sp_addumpdevice |
| sp_adduser |
| sp_altermessage |
| sp_approlepassword |
| sp_change_users_login |
| sp_changedbowner |
| sp_changegroup |
| sp_changeobjectowner |
| sp_configure |
| sp_dbcmptlevel |
| sp_dboption (update) |
| sp_dboption update part |
| sp_defaultdb |
| sp_defaultlanguage |
| sp_denylogin |
| sp_diskdefault |
| sp_dropalias |
| sp_dropapprole |
| sp_dropdevice |
| sp_dropgroup |
| sp_droplinkedsrvlogin |
| sp_droplogin |
| sp_dropremotelogin |
| sp_droprole |
| sp_droprolemember |
| sp_dropuser |
| sp_fulltext_catalog |
| sp_fulltext_column |
| sp_fulltext_database |
| sp_fulltext_service |
| sp_fulltext_table |
| sp_grantdbaccess |
| sp_grantlogin |
| sp_helplogins |
| sp_password |
| sp_recompile |
| sp_refreshview |
| sp_remoteoption |
| sp_remoteoption (update) |
| sp_rename |
| sp_renamedb |
| sp_revokedbaccess |
| sp_revokelogin |
| sp_tableoption |
| sp_updatestats |
| TRUNCATE TABLE |
| UPDATE permission on any object |
| USE to a suspect database |