Security Transact-SQL Enhancements

New DDL statements are now available for managing and controlling access permissions to databases and their objects.

New DDL Statements

New statements	Description
CREATE APPLICATION ROLE	Adds a new application role to the current database.
ALTER APPLICATION ROLE	Changes the properties of an application role.
DROP APPLICATION ROLE	Removes the application role from the current database.
CREATE CERTIFICATE	Adds a new certificate to the database instance.
ALTER CERTIFICATE	Adds a private key to a certificate, or changes the owner of a certificate.
DROP CERTIFICATE	Removes the certificate from the database.
CREATE LOGIN	Creates a new Microsoft Windows or SQL Server login account.
ALTER LOGIN	Changes the properties of a Windows or SQL Server login account.
DROP LOGIN	Removes a Microsoft Windows or SQL Server login account.
ALTER ROLE	Changes the properties of a database role.
CREATE ROLE	Creates a new database role in the current database.
DROP ROLE	Removes the role from the database.
CREATE SCHEMA	Creates a schema in the database.
ALTER SCHEMA	Changes the owner of a schema.
DROP SCHEMA	Removes the schema from the database.
CREATE USER	Adds a new user to the current database.
ALTER USER	Changes the user account in the database.
DROP USER	Removes the user account from the database.