User Security - Site Admin Account

[Guest]

Hello,

I'd like to create a remote site administrator able to add/remove user
accounts and assign to groups but not alter permissions on any database
objects. Is there a way to accomplish this?

Thanks,
Ken

 

[Joan Wild]

Yes it is possible. You need to create a second secure mdw for production (keep your current secure mdw for development). You put the site administrator in the Admins Group of the production mdw. They'll be able to create/delete accounts, but not change permissions.

Details are in the security FAQ
http://support.microsoft.com/?id=207793