SQL Server 的权限可以分三类
第一类 server 层面上的：
select * from sys.fn_builtin_permissions(default)
where class_desc like 'server';
第二类 database 层面：
select * from sys.fn_builtin_permissions(default)
where class_desc like 'database';
第三类 schema 层面：
select * from sys.fn_builtin_permissions(default)
where class_desc like 'schema';
-------------------------------------------------------------------------------------------------------------------------------------------
授权：
grant permission to grantee_principal [with grant option] [as grantor_principal];
拒绝：
deny permission to grantee_principal [cascade] [as grantor_principal];