The security for an SQL Server instance and database is mainly about managing permissions. These are tied to principals and are securable at a granular level that provides a greater flexibility and control.

To manage the server-level securable and database-level permissions, it is essential to know how the SQL Server control access is managed. The top level of the hierarchy is server scope, which contains logins, the database, and endpoints. The next level is managed on the database scope, which is contained within the server scope that controls securables such as database users, schemas, and roles. The bottom level for permissions is the schema scope that controls the schema itself and objects within the schema such as tables, views, and stored procedures. The permissions are applied to SQL Server objects on three securable scopes: server, database, and schema. On the database level, it will enable a principal to perform actions...