Fixed server roles are defined at the server level and have specific server-level administrative activities. They are server-wide in their scope and cannot be added, removed, or changed. Each member of a fixed server role can add other logins to that same role.
| bulkadmin |
Members of the bulkadmin fixed server role can run the BULK INSERT statement. |
ADMINISTER BULK OPERATIONS |
| dbcreator |
Members of the dbcreator fixed server role can create, alter, drop and restore any database. |
CREATE DATABASE |
| diskadmin |
Members of the diskadmin fixed server role can manage disk files. |
ALTER RESOURCES |
| processadmin |
Members of the processadmin fixed server role can terminate processes that are running in any instance of SQL Server. |
ALTER ANY CONNECTION
ALTER SERVER STATE |
| securityadmin |
Members of the securityadmin fixed server role can manage logins and their properties. They can GRANT, DENY and REVOKE server-level permission. They can also GRANT, DENY and REVOKE database-level permissions. Additionally, they can reset password for SQL Server logins. |
ALTER ANY LOGIN |
| serveradmin |
Members of the serveradmin fixed server role can change server-wide configuration options and shut down the server. |
ALTER ANY ENDPOINT
ALTER RESOURCES
ALTER SERVER STATE
ALTER SETTINGS
SHUTDOWN
VIEW SERVER STATE |
| setupadmin |
Members of the setupadmin fixed server role can add and remove linked servers, and also execute some system stored procedures. |
ALTER ANY LINKED SERVER |
| sysadmin |
Members of the sysadmin fixed server role can perform any activity in the server. |
CONTROL SERVER |