The

SecuritySQL Statements for User Management

The root User

The root user can act directly as SYSDBA on Firebird Embedded.Firebird will treat root as though it were SYSDBA, and it provides access to all databases on the server.

Windows Hosts

On the Windows Server operating systems, operating system accounts can be used.Windows authentication (also known as “trusted authentication”) can be enabled by including the Win_Sspi plugin in the AuthServer list in firebird.conf.The plugin must also be present in the AuthClient setting at the client-side.

Windows operating system administrators are not automatically granted SYSDBA privileges when connecting to a database.To make that happen, the internally-created role RDB$ADMIN must be altered by SYSDBA or the database owner, to enable it.For details, refer to the later section entitled [fblangref50-security-autoadminmapping].

Note	Prior to Firebird 3.0, with trusted authentication enabled, users who passed the default checks were automatically mapped to `CURRENT_USER`.In Firebird 3.0 and later, the mapping must be done explicitly using `CREATE MAPPING`.