--- title: "sys.fn_builtin_permissions (Transact-SQL) | Microsoft Docs" ms.custom: "" ms.date: "12/16/2016" ms.prod: sql ms.prod_service: "database-engine, sql-database" ms.reviewer: "" ms.technology: system-objects ms.topic: "language-reference" f1_keywords: - "fn_builtin_permissions" - "sys.fn_builtin_permissions_TSQL" - "fn_builtin_permissions_TSQL" - "sys.fn_builtin_permissions" dev_langs: - "TSQL" helpviewer_keywords: - "compact permissions types" - "viewing permission hierarchy" - "hierarchies [SQL Server], permissions" - "built-in permissions hierarchy [SQL Server]" - "fn_builtin_permissions function" - "permissions [SQL Server], hierarchy" - "displaying permission hierarchy" - "sys.fn_builtin_permissions function" ms.assetid: 704b1ad3-3534-4cf3-aff4-9fb70064b6cc author: "rothja" ms.author: "jroth" monikerRange: "=azuresqldb-current||>=sql-server-2016||=sqlallproducts-allversions||>=sql-server-linux-2017||=azuresqldb-mi-current" --- # sys.fn_builtin_permissions (Transact-SQL) [!INCLUDE[tsql-appliesto-ss2008-asdb-xxxx-xxx-md](../../includes/tsql-appliesto-ss2008-asdb-xxxx-xxx-md.md)] Returns a description of the built in permissions hierarchy of the server. `sys.fn_builtin_permissions` can only be called on [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] and [!INCLUDE[ssSDSfull](../../includes/sssdsfull-md.md)], and it returns all permissions regardless of whether they are supported on the current platform. Most permissions apply to all platforms, but some do not. For example server level permissions cannot be granted on SQL Database. For information about which platforms support each permission, see [Permissions (Database Engine)](../../relational-databases/security/permissions-database-engine.md). ![Topic link icon](../../database-engine/configure-windows/media/topic-link.gif "Topic link icon") [Transact-SQL Syntax Conventions](../../t-sql/language-elements/transact-sql-syntax-conventions-transact-sql.md) ## Syntax ``` sys.fn_builtin_permissions ( [ DEFAULT | NULL ] | empty_string | '' } ) ::= APPLICATION ROLE | ASSEMBLY | ASYMMETRIC KEY | AVAILABILITY GROUP | CERTIFICATE | CONTRACT | DATABASE | DATABASE SCOPED CREDENTIAL | ENDPOINT | FULLTEXT CATALOG | FULLTEXT STOPLIST | LOGIN | MESSAGE TYPE | OBJECT | REMOTE SERVICE BINDING | ROLE | ROUTE | SCHEMA | SEARCH PROPERTY LIST | SERVER | SERVER ROLE | SERVICE | SYMMETRIC KEY | TYPE | USER | XML SCHEMA COLLECTION ``` ## Arguments DEFAULT When it is called with the DEFAULT option (without quotes), the function will return a complete list of built in permissions. NULL Equivalent to DEFAULT. *empty_string* Equivalent to DEFAULT. **'****'** When it is called with the name of one securable class, sys.fn_builtin_permissions will return all permissions that apply to the class. is a string literal that requires quotation marks. **nvarchar(60)** ## Tables Returned |Column name|Data type|Collation|Description| |-----------------|---------------|---------------|-----------------| |class_desc|**nvarchar(60)**|Collation of the server|Description of the securable class.| |permission_name|**nvarchar(60)**|Collation of the server|Permission name.| |type|**varchar(4)**|Collation of the server|Compact permission type code. See the table that follows.| |covering_permission_name|**nvarchar(60)**|Collation of the server|If not NULL, this is the name of the permission on this class that implies the other permissions on this class.| |parent_class_desc|**nvarchar(60)**|Collation of the server|If not NULL, this is the name of the parent class that contains the current class.| |parent_covering_permission_name|**nvarchar(60)**|Collation of the server|If not NULL, this is the name of the permission on the parent class that implies all other permissions on that class.| ### Permission Types |Permission type|Permission name|Applies to securable or class| |---------------------|---------------------|-----------------------------------| |AADS|ALTER ANY DATABASE EVENT SESSION
**Applies to**: [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] ([!INCLUDE[ssSQL14](../../includes/sssql14-md.md)] through [current version](https://go.microsoft.com/fwlink/p/?LinkId=299658)).|DATABASE| |AAES|ALTER ANY EVENT SESSION|SERVER| |AAMK|ALTER ANY MASK
**Applies to**: [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] ([!INCLUDE[ssSQL15](../../includes/sssql15-md.md)] through [current version](https://go.microsoft.com/fwlink/p/?LinkId=299658)).|DATABASE| |ADBO|ADMINISTER BULK OPERATIONS|SERVER| |AEDS|ALTER ANY EXTERNAL DATA SOURCE
**Applies to**: [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] ([!INCLUDE[ssSQL15](../../includes/sssql15-md.md)] through [current version](https://go.microsoft.com/fwlink/p/?LinkId=299658)).|DATABASE| |AEFF|ALTER ANY EXTERNAL FILE FORMAT
**Applies to**: [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] ([!INCLUDE[ssSQL15](../../includes/sssql15-md.md)] through [current version](https://go.microsoft.com/fwlink/p/?LinkId=299658)).|DATABASE| |AL|ALTER|APPLICATION ROLE| |AL|ALTER|ASSEMBLY| |AL|ALTER
**Applies to**: [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] ([!INCLUDE[ssSQL11](../../includes/sssql11-md.md)] through [current version](https://go.microsoft.com/fwlink/p/?LinkId=299658)).|AVAILABILITY GROUP| |AL|ALTER|ASYMMETRIC KEY| |AL|ALTER|CERTIFICATE| |AL|ALTER|CONTRACT| |AL|ALTER|DATABASE| |AL|ALTER
**Applies t o**: [!INCLUDE[ssSQLv14_md](../../includes/sssqlv14-md.md)] and [!INCLUDE[ssSDS_md](../../includes/sssds-md.md)]. |DATABASE SCOPED CREDENTIAL| |AL|ALTER|ENDPOINT| |AL|ALTER|FULLTEXT CATALOG| |AL|ALTER|FULLTEXT STOPLIST| |AL|ALTER|LOGIN| |AL|ALTER|MESSAGE TYPE| |AL|ALTER|OBJECT| |AL|ALTER|REMOTE SERVICE BINDING| |AL|ALTER|ROLE| |AL|ALTER|ROUTE| |AL|ALTER|SCHEMA| |AL|ALTER|SEARCH PROPERTY LIST| |AL|ALTER
**Applies to**: [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] ([!INCLUDE[ssSQL11](../../includes/sssql11-md.md)] through [current version](https://go.microsoft.com/fwlink/p/?LinkId=299658)).|SERVER ROLE| |AL|ALTER|SERVICE| |AL|ALTER|SYMMETRIC KEY| |AL|ALTER|USER| |AL|ALTER|XML SCHEMA COLLECTION| |ALAA|ALTER ANY SERVER AUDIT|SERVER| |ALAG|ALTER ANY AVAILABILITY GROUP
**Applies to**: [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] ([!INCLUDE[ssSQL11](../../includes/sssql11-md.md)] through [current version](https://go.microsoft.com/fwlink/p/?LinkId=299658)).|SERVER| |ALAK|ALTER ANY ASYMMETRIC KEY|DATABASE| |ALAR|ALTER ANY APPLICATION ROLE|DATABASE| |ALAS|ALTER ANY ASSEMBLY|DATABASE| |ALCD|ALTER ANY CREDENTIAL|SERVER| |ALCF|ALTER ANY CERTIFICATE|DATABASE| |ALCK|ALTER ANY COLUMN ENCRYPTION KEY
**Applies to**: [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] ([!INCLUDE[ssSQL15](../../includes/sssql15-md.md)] through [current version](https://go.microsoft.com/fwlink/p/?LinkId=299658)).|DATABASE| |ALCM|ALTER ANY COLUMN MASTER KEY
**Applies to**: [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] ([!INCLUDE[ssSQL15](../../includes/sssql15-md.md)] through [current version](https://go.microsoft.com/fwlink/p/?LinkId=299658)).|DATABASE| |ALCO|ALTER ANY CONNECTION|SERVER| |ALDA|ALTER ANY DATABASE AUDIT|DATABASE| |ALDB|ALTER ANY DATABASE|SERVER| |ALDC|ALTER ANY DATABASE SCOPED CONFIGURATION
**Applies to**: [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] ([!INCLUDE[ssSQL15](../../includes/sssql15-md.md)] through [current version](https://go.microsoft.com/fwlink/p/?LinkId=299658)).|DATABASE| |ALDS|ALTER ANY DATASPACE|DATABASE| |ALED|ALTER ANY DATABASE EVENT NOTIFICATION|DATABASE| |ALES|ALTER ANY EVENT NOTIFICATION|SERVER| |ALFT|ALTER ANY FULLTEXT CATALOG|DATABASE| |ALHE|ALTER ANY ENDPOINT|SERVER| |ALLG|ALTER ANY LOGIN|SERVER| |ALLS|ALTER ANY LINKED SERVER|SERVER| |ALMT|ALTER ANY MESSAGE TYPE|DATABASE| |ALRL|ALTER ANY ROLE|DATABASE| |ALRS|ALTER RESOURCES|SERVER| |ALRT|ALTER ANY ROUTE|DATABASE| |ALSB|ALTER ANY REMOTE SERVICE BINDING|DATABASE| |ALSC|ALTER ANY CONTRACT|DATABASE| |ALSK|ALTER ANY SYMMETRIC KEY|DATABASE| |ALSM|ALTER ANY SCHEMA|DATABASE| |ALSP|ALTER ANY SECURITY POLICY
**Applies to**: [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] ([!INCLUDE[ssSQL15](../../includes/sssql15-md.md)] through [current version](https://go.microsoft.com/fwlink/p/?LinkId=299658)).|DATABASE| |ALSR|ALTER ANY SERVER ROLE
**Applies to**: [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] ([!INCLUDE[ssSQL11](../../includes/sssql11-md.md)] through [current version](https://go.microsoft.com/fwlink/p/?LinkId=299658)).|SERVER| |ALSS|ALTER SERVER STATE|SERVER| |ALST|ALTER SETTINGS|SERVER| |ALSV|ALTER ANY SERVICE|DATABASE| |ALTG|ALTER ANY DATABASE DDL TRIGGER|DATABASE| |ALTR|ALTER TRACE|SERVER| |ALUS|ALTER ANY USER|DATABASE| |AUTH|AUTHENTICATE|DATABASE| |AUTH|AUTHENTICATE SERVER|SERVER| |BADB|BACKUP DATABASE|DATABASE| |BALO|BACKUP LOG|DATABASE| |CADB|CONNECT ANY DATABASE
**Applies to**: [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] ([!INCLUDE[ssSQL14](../../includes/sssql14-md.md)] through [current version](https://go.microsoft.com/fwlink/p/?LinkId=299658)).|SERVER| |CL|CONTROL|APPLICATION ROLE| |CL|CONTROL|ASSEMBLY| |CL|CONTROL|ASYMMETRIC KEY| |CL|CONTROL
**Applies to**: [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] ([!INCLUDE[ssSQL11](../../includes/sssql11-md.md)] through [current version](https://go.microsoft.com/fwlink/p/?LinkId=299658)).|AVAILABILITY GROUP| |CL|CONTROL|CERTIFICATE| |CL|CONTROL|CONTRACT| |CL|CONTROL|DATABASE| |CL|CONTROL
**Applies to**: [!INCLUDE[ssSQLv14_md](../../includes/sssqlv14-md.md)] and [!INCLUDE[ssSDS_md](../../includes/sssds-md.md)]. |DATABASE SCOPED CREDENTIAL| |CL|CONTROL|ENDPOINT| |CL|CONTROL|FULLTEXT CATALOG| |CL|CONTROL|FULLTEXT STOPLIST| |CL|CONTROL|LOGIN| |CL|CONTROL|MESSAGE TYPE| |CL|CONTROL|OBJECT| |CL|CONTROL|REMOTE SERVICE BINDING| |CL|CONTROL|ROLE| |CL|CONTROL|ROUTE| |CL|CONTROL|SCHEMA| |CL|CONTROL|SEARCH PROPERTY LIST| |CL|CONTROL SERVER|SERVER| |CL|CONTROL
**Applies to**: [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] ([!INCLUDE[ssSQL11](../../includes/sssql11-md.md)] through [current version](https://go.microsoft.com/fwlink/p/?LinkId=299658)).|SERVER ROLE| |CL|CONTROL|SERVICE| |CL|CONTROL|SYMMETRIC KEY| |CL|CONTROL|TYPE| |CL|CONTROL|USER| |CL|CONTROL|XML SCHEMA COLLECTION| |CO|CONNECT|DATABASE| |CO|CONNECT|ENDPOINT| |CORP|CONNECT REPLICATION|DATABASE| |COSQ|CONNECT SQL|SERVER| |CP|CHECKPOINT|DATABASE| |CRAC|CREATE AVAILABILITY GROUP
**Applies to**: [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] ([!INCLUDE[ssSQL11](../../includes/sssql11-md.md)] through [current version](https://go.microsoft.com/fwlink/p/?LinkId=299658)).|SERVER| |CRAG|CREATE AGGREGATE|DATABASE| |CRAK|CREATE ASYMMETRIC KEY|DATABASE| |CRAS|CREATE ASSEMBLY|DATABASE| |CRCF|CREATE CERTIFICATE|DATABASE| |CRDB|CREATE ANY DATABASE|SERVER| |CRDB|CREATE DATABASE|DATABASE| |CRDE|CREATE DDL EVENT NOTIFICATION|SERVER| |CRDF|CREATE DEFAULT|DATABASE| |CRED|CREATE DATABASE DDL EVENT NOTIFICATION|DATABASE| |CRFN|CREATE FUNCTION|DATABASE| |CRFT|CREATE FULLTEXT CATALOG|DATABASE| |CRHE|CREATE ENDPOINT|SERVER| |CRMT|CREATE MESSAGE TYPE|DATABASE| |CRPR|CREATE PROCEDURE|DATABASE| |CRQU|CREATE QUEUE|DATABASE| |CRRL|CREATE ROLE|DATABASE| |CRRT|CREATE ROUTE|DATABASE| |CRRU|CREATE RULE|DATABASE| |CRSB|CREATE REMOTE SERVICE BINDING|DATABASE| |CRSC|CREATE CONTRACT|DATABASE| |CRSK|CREATE SYMMETRIC KEY|DATABASE| |CRSM|CREATE SCHEMA|DATABASE| |CRSN|CREATE SYNONYM|DATABASE| |CRSO|CREATE SEQUENCE|SCHEMA| |CRSR|CREATE SERVER ROLE
**Applies to**: [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] ([!INCLUDE[ssSQL11](../../includes/sssql11-md.md)] through [current version](https://go.microsoft.com/fwlink/p/?LinkId=299658)).|SERVER| |CRSV|CREATE SERVICE|DATABASE| |CRTB|CREATE TABLE|DATABASE| |CRTE|CREATE TRACE EVENT NOTIFICATION|SERVER| |CRTY|CREATE TYPE|DATABASE| |CRVW|CREATE VIEW|DATABASE| |CRXS|CREATE XML SCHEMA COLLECTION|DATABASE| |DABO|ADMINISTER DATABASE BULK OPERATIONS
**Applies to**: [!INCLUDE[ssSDS_md](../../includes/sssds-md.md)].|DATABASE| |DL|DELETE|DATABASE| |DL|DELETE|OBJECT| |DL|DELETE|SCHEMA| |EAES|EXECUTE ANY EXTERNAL SCRIPT
**Applies to**: [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] ([!INCLUDE[ssSQL15](../../includes/sssql15-md.md)] through [current version](https://go.microsoft.com/fwlink/p/?LinkId=299658)).|DATABASE| |EX|EXECUTE|DATABASE| |EX|EXECUTE|OBJECT| |EX|EXECUTE|SCHEMA| |EX|EXECUTE|TYPE| |EX|EXECUTE|XML SCHEMA COLLECTION| |IAL|IMPERSONATE ANY LOGIN
**Applies to**: [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] ([!INCLUDE[ssSQL14](../../includes/sssql14-md.md)] through [current version](https://go.microsoft.com/fwlink/p/?LinkId=299658)).|SERVER| |IM|IMPERSONATE|LOGIN| |IM|IMPERSONATE|USER| |IN|INSERT|DATABASE| |IN|INSERT|OBJECT| |IN|INSERT|SCHEMA| |KIDC|KILL DATABASE CONNECTION
**Applies to**: [!INCLUDE[ssSDSfull](../../includes/sssdsfull-md.md)].|DATABASE| |RC|RECEIVE|OBJECT| |RF|REFERENCES|ASSEMBLY| |RF|REFERENCES|ASYMMETRIC KEY| |RF|REFERENCES|CERTIFICATE| |RF|REFERENCES|CONTRACT| |RF|REFERENCES|DATABASE| |RF|REFERENCES
**Applies to**: [!INCLUDE[ssSQLv14_md](../../includes/sssqlv14-md.md)] and [!INCLUDE[ssSDS_md](../../includes/sssds-md.md)]. |DATABASE SCOPED CREDENTIAL| |RF|REFERENCES|FULLTEXT CATALOG| |RF|REFERENCES|FULLTEXT STOPLIST| |RF|REFERENCES|SEARCH PROPERTY LIST| |RF|REFERENCES|MESSAGE TYPE| |RF|REFERENCES|OBJECT| |RF|REFERENCES|SCHEMA| |RF|REFERENCES|SYMMETRIC KEY| |RF|REFERENCES|TYPE| |RF|REFERENCES|XML SCHEMA COLLECTION| |SHDN|SHUTDOWN|SERVER| |SL|SELECT|DATABASE| |SL|SELECT|OBJECT| |SL|SELECT|SCHEMA| |SN|SEND|SERVICE| |SPLN|SHOWPLAN|DATABASE| |SUQN|SUBSCRIBE QUERY NOTIFICATIONS|DATABASE| |SUS|SELECT ALL USER SECURABLES
**Applies to**: [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] ([!INCLUDE[ssSQL14](../../includes/sssql14-md.md)] through [current version](https://go.microsoft.com/fwlink/p/?LinkId=299658)).|SERVER| |TO|TAKE OWNERSHIP|ASSEMBLY| |TO|TAKE OWNERSHIP|ASYMMETRIC KEY| |TO|TAKE OWNERSHIP
**Applies to**: [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] ([!INCLUDE[ssSQL11](../../includes/sssql11-md.md)] through [current version](https://go.microsoft.com/fwlink/p/?LinkId=299658)).|AVAILABILITY GROUP| |TO|TAKE OWNERSHIP|CERTIFICATE| |TO|TAKE OWNERSHIP|CONTRACT| |TO|TAKE OWNERSHIP|DATABASE| |TO|TAKE OWNERSHIP
**Applies to**: [!INCLUDE[ssSQLv14_md](../../includes/sssqlv14-md.md)] and [!INCLUDE[ssSDS_md](../../includes/sssds-md.md)]. |DATABASE SCOPED CREDENTIAL| |TO|TAKE OWNERSHIP|ENDPOINT| |TO|TAKE OWNERSHIP|FULLTEXT CATALOG| |TO|TAKE OWNERSHIP|FULLTEXT STOPLIST| |TO|TAKE OWNERSHIP|SEARCH PROPERTY LIST| |TO|TAKE OWNERSHIP|MESSAGE TYPE| |TO|TAKE OWNERSHIP|OBJECT| |TO|TAKE OWNERSHIP|REMOTE SERVICE BINDING| |TO|TAKE OWNERSHIP|ROLE| |TO|TAKE OWNERSHIP|ROUTE| |TO|TAKE OWNERSHIP|SCHEMA| |TO|TAKE OWNERSHIP
**Applies to**: [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] ([!INCLUDE[ssSQL11](../../includes/sssql11-md.md)] through [current version](https://go.microsoft.com/fwlink/p/?LinkId=299658)).|SERVER ROLE| |TO|TAKE OWNERSHIP|SERVICE| |TO|TAKE OWNERSHIP|SYMMETRIC KEY| |TO|TAKE OWNERSHIP|TYPE| |TO|TAKE OWNERSHIP|XML SCHEMA COLLECTION| |UMSK|UNMASK
**Applies to**: [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] ([!INCLUDE[ssSQL15](../../includes/sssql15-md.md)] through [current version](https://go.microsoft.com/fwlink/p/?LinkId=299658)).|DATABASE| |UP|UPDATE|DATABASE| |UP|UPDATE|OBJECT| |UP|UPDATE|SCHEMA| |VW|VIEW DEFINITION|APPLICATION ROLE| |VW|VIEW DEFINITION|ASSEMBLY| |VW|VIEW DEFINITION|ASYMMETRIC KEY| |VW|VIEW DEFINITION
**Applies to**: [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] ([!INCLUDE[ssSQL11](../../includes/sssql11-md.md)] through [current version](https://go.microsoft.com/fwlink/p/?LinkId=299658)).|AVAILABILITY GROUP| |VW|VIEW DEFINITION|CERTIFICATE| |VW|VIEW DEFINITION|CONTRACT| |VW|VIEW DEFINITION|DATABASE| |VW|VIEW DEFINITION
**Applies to**: [!INCLUDE[ssSQLv14_md](../../includes/sssqlv14-md.md)] and [!INCLUDE[ssSDS_md](../../includes/sssds-md.md)]. |DATABASE SCOPED CREDENTIAL| |VW|VIEW DEFINITION|ENDPOINT| |VW|VIEW DEFINITION|FULLTEXT CATALOG| |VW|VIEW DEFINITION|FULLTEXT STOPLIST| |VW|VIEW DEFINITION|LOGIN| |VW|VIEW DEFINITION|MESSAGE TYPE| |VW|VIEW DEFINITION|OBJECT| |VW|VIEW DEFINITION|REMOTE SERVICE BINDING| |VW|VIEW DEFINITION|ROLE| |VW|VIEW DEFINITION|ROUTE| |VW|VIEW DEFINITION|SCHEMA| |VW|VIEW DEFINITION|SEARCH PROPERTY LIST| |VW|VIEW DEFINITION
**Applies to**: [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] ([!INCLUDE[ssSQL11](../../includes/sssql11-md.md)] through [current version](https://go.microsoft.com/fwlink/p/?LinkId=299658)).|SERVER ROLE| |VW|VIEW DEFINITION|SERVICE| |VW|VIEW DEFINITION|SYMMETRIC KEY| |VW|VIEW DEFINITION|TYPE| |VW|VIEW DEFINITION|USER| |VW|VIEW DEFINITION|XML SCHEMA COLLECTION| |VWAD|VIEW ANY DEFINITION|SERVER| |VWCK|VIEW ANY COLUMN ENCRYPTION KEY DEFINITION
**Applies to**: [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] ([!INCLUDE[ssSQL15](../../includes/sssql15-md.md)] through [current version](https://go.microsoft.com/fwlink/p/?LinkId=299658)).|DATABASE| |VWCM|VIEW ANY COLUMN MASTER KEY DEFINITION
**Applies to**: [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] ([!INCLUDE[ssSQL15](../../includes/sssql15-md.md)] through [current version](https://go.microsoft.com/fwlink/p/?LinkId=299658)).|DATABASE| |VWCT|VIEW CHANGE TRACKING|OBJECT| |VWCT|VIEW CHANGE TRACKING|SCHEMA| |VWDB|VIEW ANY DATABASE|SERVER| |VWDS|VIEW DATABASE STATE|DATABASE| |VWSS|VIEW SERVER STATE|SERVER| |XA|EXTERNAL ACCESS ASSEMBLY|SERVER| |XU|UNSAFE ASSEMBLY|SERVER| ## Remarks `sys.fn_builtin_permissions` is a table-valued function that emits a copy of the predefined permission hierarchy. This hierarchy includes covering permissions. The `DEFAULT` result set describes a directed, acyclic graph of the permissions hierarchy, of which the root is (class = SERVER, permission = CONTROL SERVER). `sys.fn_builtin_permissions` does not accept correlated parameters. `sys.fn_builtin_permissions` will return an empty set when it is called with a class name that is not valid. [!INCLUDE[database-engine-permissions](../../includes/paragraph-content/database-engine-permissions.md)] ## Permissions Requires membership in the public role. ## Examples ### A. Listing all built in permissions Use `DEFAULT` or an empty string to return all permissions. ```sql SELECT * FROM sys.fn_builtin_permissions(DEFAULT); SELECT * FROM sys.fn_builtin_permissions(''); ``` ### B. Listing permissions that can be set on a symmetric key Specify a class to return all possible permissions for that class. ```sql SELECT * FROM sys.fn_builtin_permissions(N'SYMMETRIC KEY'); ``` ### C. Listing classes on which there is a SELECT permission ```sql SELECT * FROM sys.fn_builtin_permissions(DEFAULT) WHERE permission_name = 'SELECT'; ``` ## See Also [Permissions Hierarchy (Database Engine)](../../relational-databases/security/permissions-hierarchy-database-engine.md) [GRANT (Transact-SQL)](../../t-sql/statements/grant-transact-sql.md) [CREATE SCHEMA (Transact-SQL)](../../t-sql/statements/create-schema-transact-sql.md) [DROP SCHEMA (Transact-SQL)](../../t-sql/statements/drop-schema-transact-sql.md) [Permissions (Database Engine)](../../relational-databases/security/permissions-database-engine.md) [sys.fn_my_permissions (Transact-SQL)](../../relational-databases/system-functions/sys-fn-my-permissions-transact-sql.md) [HAS_PERMS_BY_NAME (Transact-SQL)](../../t-sql/functions/has-perms-by-name-transact-sql.md)