Administering a SQL Database Infrastructure — Question 105

Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.
A company has an on-premises Microsoft SQL Server environment and Microsoft Azure SQL Database instances. The environment hosts a customer database named DB1.
Customers connect to hosted database instances by using line-of-business applications. Developers connect by using SQL Server Management Studio (SSMS).
You need to grant the developers permission to alter views for DB1 while following the principle of least privilege.
Which permission should you grant?

Answer options

• A. DDLAdmin
• B. db_datawriter
• C. dbcreator
• D. dbo
• E. View Database State
• F. View Server State
• G. View Definition
• H. sysadmin

Correct answer: A

Explanation

The DDLAdmin permission allows developers to alter database objects such as views while maintaining a minimal access level, which aligns with the principle of least privilege. Other options like db_datawriter and dbcreator provide different levels of access that are not specifically tailored to altering views, while dbo and sysadmin grant excessive permissions that violate the principle of least privilege.