Skip to content

Commit c4aa6b1

Browse files
committed
Update grant permissions to SQL MLS
1 parent 679eb35 commit c4aa6b1

1 file changed

Lines changed: 7 additions & 7 deletions

File tree

docs/machine-learning/security/user-permission.md

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -3,17 +3,17 @@ title: Grant permissions to execute Python and R scripts
33
description: Learn how you can give users permission to run external Python and R scripts in SQL Server Machine Learning Services and give read, write, or data definition language (DDL) permissions to databases.
44
ms.prod: sql
55
ms.technology: machine-learning-services
6-
ms.date: 10/14/2020
6+
ms.date: 03/19/2021
77
ms.topic: how-to
88
author: dphansen
99
ms.author: davidph
1010
ms.custom: seo-lt-2019, contperf-fy20q4
1111
monikerRange: ">=sql-server-2016||>=sql-server-linux-ver15||=azuresqldb-mi-current"
1212
---
13-
# Grant users permission to execute Python and R scripts with SQL Server Machine Learning Services
13+
# Grant database users permission to execute Python and R scripts with SQL Server Machine Learning Services
1414
[!INCLUDE [SQL Server 2016 SQL MI](../../includes/applies-to-version/sqlserver2016-asdbmi.md)]
1515

16-
Learn how you can give users permission to run external Python and R scripts in [SQL Server Machine Learning Services](../sql-server-machine-learning-services.md) and give read, write, or data definition language (DDL) permissions to databases.
16+
Learn how you can give a [database user](../../relational-databases/security/authentication-access/create-a-database-user.md) permission to run external Python and R scripts in [SQL Server Machine Learning Services](../sql-server-machine-learning-services.md) and give read, write, or data definition language (DDL) permissions to databases.
1717

1818
For more information, see the permissions section in [Security overview for the extensibility framework](../../machine-learning/concepts/security.md#permissions).
1919

@@ -23,7 +23,7 @@ For more information, see the permissions section in [Security overview for the
2323

2424
For each user who runs Python or R scripts with SQL Server Machine Learning Services, and who are not an administrator, you must grant them the permission to run external scripts in each database where the language is used.
2525

26-
To grant permission to execute external script, run the following script:
26+
To grant permission to a [database user](../../relational-databases/security/authentication-access/create-a-database-user.md) to execute external script, run the following script:
2727

2828
```sql
2929
USE <database_name>
@@ -38,15 +38,15 @@ GRANT EXECUTE ANY EXTERNAL SCRIPT TO [UserName]
3838

3939
## Grant databases permissions
4040

41-
While a user is running scripts, the user might need to read data from other databases. The user might also need to create new tables to store results, and write data into tables.
41+
While a database user is running scripts, the database user might need to read data from other databases. The database user might also need to create new tables to store results, and write data into tables.
4242

43-
For each Windows user account or SQL login that is running R or Python scripts, ensure that it has the appropriate permissions on the specific database:
43+
For each database user account or SQL login that is running R or Python scripts, ensure that it has the appropriate permissions on the specific database:
4444

4545
+ `db_datareader` to read data.
4646
+ `db_datawriter` to save objects to the database.
4747
+ `db_ddladmin` to create objects such as stored procedures or tables containing trained and serialized data.
4848

49-
For example, the following [!INCLUDE[tsql](../../includes/tsql-md.md)] statement gives the SQL login *MySQLLogin* the rights to run T-SQL queries in the *ML_Samples* database. To run this statement, the SQL login must already exist in the security context of the server.
49+
For example, the following [!INCLUDE[tsql](../../includes/tsql-md.md)] statement gives the SQL login *MySQLLogin* the rights to run T-SQL queries in the *ML_Samples* database. To run this statement, the SQL login must already exist in the security context of the server. For more information, see [sp_addrolemember (Transact-SQL)](../../relational-databases/system-stored-procedures/sp-addrolemember-transact-sql.md).
5050

5151
```sql
5252
USE ML_Samples

0 commit comments

Comments
 (0)