Managing application roles
Application roles allow users to access data on the SQL Server only when they log on and access it using the relevant application, but without allowing the users to directly access the raw data in the SQL database tables using other applications or tools such as SQL Server Management Studio.
An application role is created for SunSystems, and this must be made available to any client application that needs access to SunSystems data (such as a reporting tool). However, it can only be used by such a client if the user has already been authenticated by the security service, that is, using a user ID created in User Manager.
The application role itself is secured by means of a password. Users do not need to know this password, but a system administrator installing a new application must know the password if the application is to be allowed access to SunSystems data.