Another post in the PowerShell Box of Tricks series.
In yesterdays post Creating a Windows User and Adding to SQL Role we created a Windows User, today it’s a SQL User. Again it is nice and simple and allows you to pipe input from other sources enabling you to easily and quickly repeat any process that needs SQL Users.
It is pretty similar as you would expect. We create a Login Object, set the Logintype to SqlLogin add the Password and create it with the Create Method. It is then added to the Role Specified
The same error checking is performed as the Windows Login function. If the login already exists on the server it will just add it to the role and if the role has been mistyped it will let you know. It does this by checking if the role object is Null for the Roles and the Contains Method for the Logins
The function is called as follows.
Add-SQLAccountToSQLRole FADE2BLACK Test Password01 dbcreator
The code can be found here
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 |
######################################################################## # # NAME: Add-SQLAccountToSQLRole.ps1 # AUTHOR: Rob Sewell http://sqldbawithabeard.com # DATE:11/09/2013 # # COMMENTS: Load function to create a sql user and add them to a server role # # USAGE: Add-SQLAccountToSQLRole FADE2BLACK Test Password01 dbcreator # Add-SQLAccountToSQLRole FADE2BLACK Test Password01 public Function Add-SQLAccountToSQLRole ([String]$Server, [String] $User, [String]$Password, [String]$Role) { $Svr = New-Object ('Microsoft.SqlServer.Management.Smo.Server') $server # Check if Role entered Correctly $SVRRole = $svr.Roles[$Role] if ($SVRRole -eq $null) { Write-Host " $Role is not a valid Role on $Server" } else { #Check if User already exists if ($svr.Logins.Contains($User)) { $SqlUser = New-Object -TypeName Microsoft.SqlServer.Management.Smo.Login $Server, $User $LoginName = $SQLUser.Name if ($Role -notcontains "public") { $SVRRole.AddMember($LoginName) } } else { $SqlUser = New-Object -TypeName Microsoft.SqlServer.Management.Smo.Login $Server, $User $SqlUser.LoginType = 'SqlLogin' $SqlUser.PasswordExpirationEnabled = $false $SqlUser.Create($Password) $LoginName = $SQLUser.Name if ($Role -notcontains "public") { $SVRRole.AddMember($LoginName) } } } } |