A credential that belongs to one database, made using CREATE DATABASE SCOPED CREDENTIAL by someone holding CONTROL permission there.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Database scoped credential in context, with comparison tables and the common traps.
Terms in this definition
- Schema
The middle part of a Unity Catalog name (
catalog.schema.table), grouping tables, views, volumes, functions and models inside a catalog. A grant on it covers everything in it now and later, and nothing inside can be reached withoutUSE SCHEMA. - CRUD
Shorthand for create, read, update and delete, the four basic things you do with data. Data-plane roles in Azure Cosmos DB, for instance, authorise those operations on items.
- CONTROL
Granting this on a securable gives all other permissions on it too, making it the most powerful SQL permission. At database scope that includes UNMASK and ALTER ANY MASK. Warehouse access through the Admin, Member or Contributor workspace roles carries it.
Related terms
- db_owner
Built-in role granting complete control over a database, which is too much for everyday data access. If membership comes only through an Entra group, creating a database scoped credential fails with error 2760.