Configure OST Users in SSMS

Learn how to map SQL Server logins to databases, assign data reader and writer roles, and script new logins using SQL Server Management Studio.

August 27, 2026 By Tim Cooke

This guide explains how to connect to a SQL Server instance in SQL Server Management Studio (SSMS), map existing user logins to databases with appropriate role permissions, and script new logins.

This workflow is intended for database administrators and IT administrators responsible for user provisioning, access control, and database permissions across SQL Server instances.

Open and Connect to SQL Server Management Studio

Step #1: Click the Start button on the Windows taskbar. — Click the **Start** button on the Windows taskbar.

Step #2: Click SQL Server Management Studio in the Start menu. — Click **SQL Server Management Studio** in the Start menu.

Step #3: Click the drop-down arrow for the Server name field in the Connect to Server dialog. — Click the drop-down arrow for the **Server name** field in the Connect to Server dialog.

Step #4: Select the target server instance from the drop-down list. Best practice is that this is a seperate OST instance, but in this example the client has their OST databases in the Estimating instance. — Select the target server instance from the drop-down list. Best practice is that this is a seperate OST instance, but in this example the client has their OST databases in the Estimating instance.

Step #5: Click Connect to establish the server connection. — Click **Connect** to establish the server connection.

Existing Users - Map Logins and Assign Database Roles

Step #6: Click + next to the Security folder in the Object Explorer pane to expand it. — Click + next to the **Security** folder in the Object Explorer pane to expand it.

Step #7: Click + next to the Logins folder to view existing server logins. — Click + next to the **Logins** folder to view existing server logins.

Step #8: Right-click the target login account in the Logins list. — Right-click the target login account in the Logins list.

Step #9: Click Properties in the context menu. — Click **Properties** in the context menu.

Step #10: Click User Mapping in the left navigation list under Select a page. — Click **User Mapping** in the left navigation list under Select a page.

Step #11: Click the Map checkbox for the target database in the Users mapped to this login list. — Click the **Map** checkbox for the target database in the Users mapped to this login list.

Step #12: Click the db_datareader checkbox under Database role membership. — Click the **db_datareader** checkbox under Database role membership.

Step #13: Click the db_datawriter checkbox under Database role membership. — Click the **db_datawriter** checkbox under Database role membership.

Repeat steps 11-13 for any additional OST databases they need access to.
DO NOT make changes to any other database mappings or roles. (ie. Estimating Databases)

Step #14: Click OK to save the user mapping and role membership configuration. — Click OK to save the user mapping and role membership configuration.

For New Users - Script and Create a New Login via Query

Step #15: Right-click a login account that already exists in Object Explorer to open its context menu. — Right-click a login account that already exists in Object Explorer to open its context menu.

Step #16: Click New Query Editor Window under Script Login as > CREATE To. — Click **New Query Editor Window** under Script Login as > CREATE To.

Step #17: Click the login name in the query editor to update the target account name in the script. Ex: [AKTIONHOSTING\tcooke.akt] — Click the login name in the query editor to update the target account name in the script.

Ex: [AKTIONHOSTING\tcooke.akt]

Step #18: Click ▷ Execute on the toolbar (or press F5) to run the script and create the new login. — Click **▷ Execute** on the toolbar (or press F5) to run the script and create the new login.

Now that the New User has been added, go back to Setp 8 to assign the mappings and roles.

Term	Definition
SSMS	SQL Server Management Studio, the administrative client application used to manage SQL Server instances and databases.
db_datareader	A fixed database-level role that permits members to read all data from user tables and views.
db_datawriter	A fixed database-level role that permits members to add, update, and delete data in all user tables.
Object Explorer	The hierarchical navigation pane in SSMS used to browse and manage server instances and their database objects.

Configure OST Users in SSMS

Learn how to map SQL Server logins to databases, assign data reader and writer roles, and script new logins using SQL Server Management Studio.

August 27, 2026 By Tim Cooke

This guide explains how to connect to a SQL Server instance in SQL Server Management Studio (SSMS), map existing user logins to databases with appropriate role permissions, and script new logins.

This workflow is intended for database administrators and IT administrators responsible for user provisioning, access control, and database permissions across SQL Server instances.

Open and Connect to SQL Server Management Studio

Existing Users - Map Logins and Assign Database Roles

Repeat steps 11-13 for any additional OST databases they need access to.
DO NOT make changes to any other database mappings or roles. (ie. Estimating Databases)

For New Users - Script and Create a New Login via Query

Now that the New User has been added, go back to Setp 8 to assign the mappings and roles.

Term	Definition
SSMS	SQL Server Management Studio, the administrative client application used to manage SQL Server instances and databases.
db_datareader	A fixed database-level role that permits members to read all data from user tables and views.
db_datawriter	A fixed database-level role that permits members to add, update, and delete data in all user tables.
Object Explorer	The hierarchical navigation pane in SSMS used to browse and manage server instances and their database objects.