trustworthy-bit.md

title	description	author	ms.author	ms.date	ms.service	ms.subservice	ms.topic	helpviewer_keywords
Trustworthy Bit	Trustworthy Bit	VanMSFT	vanto	12/15/2023	sql	security	reference	Best Practices [Database Engine]

Trustworthy bit

[!INCLUDE SQL Server]

This rule determines whether the dbo role for a database is assigned to the sysadmin fixed server role and the database has its trustworthy bit set to ON.

If these conditions are met, a privileged database user can elevate privileges to the sysadmin role. In this role, the user can create and run unsafe assemblies that compromise the system.

Best practices recommendations

Turn off the trustworthy bit or revoke sysadmin permissions from the dbo database role.

For more information

ALTER DATABASE (Transact-SQL)

Related content

• Monitor and Enforce Best Practices by Using Policy-Based Management