Which of the following is NOT a valid description of the public role?
-
The public role captures all default permissions for users in a database.
-
The public role cannot be dropped.
-
The public role is contained in every database, including msdb, tempdb, model, and all user databases except in the master database for security purposes.
-
The public role cannot have users, groups, or roles assigned to it.
The public role exists in EVERY database, INCLUDING master. Options A, B, and D are all true statements about the public role: it captures default permissions, cannot be dropped, and cannot have members assigned. Option C is false (and thus the correct answer) because it incorrectly claims the public role is NOT in master.
The public role exists in every database on the server, including system databases like master, model, tempdb, and msdb — there is no exception carving master out of it. So the statement claiming it's excluded from master "for security purposes" is factually wrong, which is exactly why it's the correct choice for a "NOT a valid description" question. The other statements — that public captures default permissions, cannot be dropped, and cannot have members explicitly assigned — are all accurate descriptions of how the public role behaves.