User Permissions Migration for SQL Server and Amazon RDS for SQL Server

Free Tool – SQL Permissions Extractor

Copy user permissions across database versions and editions

  • Generate T-SQL scripts for copying of user permissions
  • Edit, save, and execute SQL Server permissions scripts
  • Include object level permissions for selected databases
  • Four steps to copy, extract, modify and apply changes
  • Connect to cloud and run in cloud (provisional)

Copy Permissions Seamlessly

Copy user permissions across various versions of SQL Server or clone a users permissions within the same server.

Execute Permissions Scripts

Once SQL permissions extractor has generated a permissions script, apply this script to any object or server in your SQL environment.

Select Object Permissions

Drill down, select, and copy permissions for specific databases within your SQL Server.

Simple Four-step Process

Simply select a SQL Server login, script the permissions associated with the selected login, modify that script, and apply the permissions to a target SQL Server.

Connect to Cloud and Run in Cloud (Provisional)

Connect to database instances hosted in the cloud, such as SQL Server on Azure Virtual Machine (VM), SQL Server on Amazon Elastic Compute Cloud (EC2), and SQL Server on Amazon Relational Database Service (RDS).

Run on virtual machines hosted in the cloud, such as Windows on Azure Virtual Machine (VM) and Windows on Amazon Elastic Compute Cloud (EC2).

* Work on SQL Server on-premises and in the cloud, and without installing anything on the affected instances.

Tech Specs

Desktop Console

  • Microsoft Windows: Vista SP1, Server 2008 (not supported on Server Core Role), 7, Server 2008 R2 (not supported on Server Core Role); 8, Server 2012, 8.1, Server 2012 R2, 10 (provisional)
  • Microsoft .NET Framework: 4.0+
  • web browser: Microsoft Internet Explorer 10.x+ (minimum of Windows 7 SP1, Server 2008 R2 SP1), Microsoft Edge, Google Chrome, Mozilla Firefox

Database Platforms

  • Microsoft SQL Server: 2008 R2, 2012; 2014, 2016, 2017, 2019 CTP Windows & Linux (provisional)

SQL Permissions Extractor does not install any components, dynamic link libraries (DLLs), scripts, stored procedures, or tables on the monitored database instances.

Database Instances in Cloud

  • Microsoft Azure: Virtual Machine VM (provisional)
  • Amazon Web Services: Elastic Compute Cloud EC2 (provisional), Relational Database Service RDS (provisional, with limitations)
    (for Amazon RDS: SQL Permissions Extractor cannot target system databases.)
  • connection: using DNS domain name or IP address, and SQL authentication


SQL Permissions Extractor SQL Secure
Graphical user interface
Generate T-SQL scripts
Edit and save permissions scripts
Execute permissions scripts
Include object level permissions
Security model analysis engine
Policy templates for PCI and HIPAA regulations
Security report card
Weak password detection
Detects unresolved windows accounts
Cross-server reporting
Configurable data collection
Powerful user analysis
Central console for analysis and auditing
Capture security snapshots
Comprehensive security model version history
Evaluation copies available N/A Yes, free for 14 days
Download Now Start for FREE
SQL Permissions Extractor

IDERA Community

Check out the latest blog posts for product tips & tricks from other users.

Join the Discussion