DBLense SQL Server Security Manager — User Guide
A centralized security control plane for SQL Server. Manage logins, users, roles, and permissions with friendly names. Enforce password policies, detect security drift, run compliance checks, and export audit reports.
Overview
DBLense SQL Server Security Manager provides a single-pane-of-glass view of your SQL Server security posture. It queries sys.server_principals, sys.database_principals, sys.database_role_members, sys.database_permissions, and other system views to present security information in a friendly, actionable format.
The tool translates SQL Server’s technical permission names into human-readable labels — db_datareader becomes “Read”, db_owner becomes “Full Control”, and SELECT becomes “Read” — making security reviews accessible to non-DBA stakeholders.
Supports SQL Server 2016+ and Azure SQL Managed Instance.
Key Use Cases
- Security audit — Review all logins, users, and permissions in a single dashboard with risk scores and compliance checks
- Access review — Quickly understand who has access to what using friendly permission names instead of raw SQL roles
- Login management — Create, disable, unlock, and reset passwords for SQL Server logins without writing T-SQL
- Compliance reporting — Generate Excel and PDF reports identifying orphaned users, excessive permissions, and weak passwords
- Drift detection — Compare security configurations between databases to find inconsistencies
- Server migration — Export all logins with SID and password hash preservation for seamless migration to a new server
- Investigation — Track failed login attempts and permission changes for forensic analysis