Configure Sysadmin Accounts - SQL-FineBuild/Common GitHub Wiki
| Previous Configure Standard Accounts | Manual Configuration | Configure DBA Non-Sysadmin Group Next |
|---|
FineBuild can configure the Sysadmin accounts that are needed by SQL Server.
Details of the accounts that are given sysadmin rights are given below:
| Account Description |
|---|
| Account that is running the SQL FineBuild install process |
| DBA Team Sysadmin group |
| SQL Server Service account |
| SQL Agent Service account |
Security Compliance
Sysadmin Accounts configuration helps to focus SQL DB Engine administration rights on to the DBA Team. If you setup Security Compliance then Sysadmin Accounts configuration will always be implemented.
FineBuild Configure Sysadmin Accounts
The Sysadmin Accounts configuration relates to Process Id 5CB and is controlled by the parameters below:
| SQL Version | Parameter | FULL Build | WORKSTATION Build | CLIENT Build |
|---|---|---|---|---|
| SQL2019 | /SetupSAAccounts: | Yes | Yes | N/A |
| SQL2017 | /SetupSAAccounts: | Yes | Yes | N/A |
| SQL2016 | /SetupSAAccounts: | Yes | Yes | N/A |
| SQL2014 | /SetupSAAccounts: | Yes | Yes | N/A |
| SQL2012 | /SetupSAAccounts: | Yes | Yes | N/A |
| SQL2008R2 | /SetupSAAccounts: | Yes | Yes | N/A |
| SQL2008 | /SetupSAAccounts: | Yes | Yes | N/A |
| SQL2005 | /SetupSAAccounts: | Yes | Yes | N/A |
In order to maintain compatibility with older versions of SQL FineBuild, the parameter /ConfigSAAccounts: can also be used.
FineBuild also uses the following parameters to help Configure Sysadmin Accounts:
| Parameter | Default Value | Description |
|---|---|---|
| /GroupDBA: | GBGGDBAS01 | DBA Team Sysadmin group |
| /SQLSvcAccount: | none | SQL Server Service account |
| /AgtSvcAccount: | none | SQL Agent Service account |
FineBuild will automatically give these accounts sysadmin rights in SQL Server.
Manual Configure Sysadmin Accounts
The following steps show what you would have to do for manual Sysadmin Accounts configuration. FineBuild does all of this work for you automatically.
The same process is used to configure all of these accounts. When the accounts are added to SQL Server in Configure Standard Accounts, the following additional step should also be performed.
-
Set the Server Role to sysadmin
Perform this task for the following accounts
- /GroupDBA: DBA Sysadmin group
- SQL Server service accounts
Copyright FineBuild Team © 2013 - 2020. License and Acknowledgements
| Previous Configure Standard Accounts | Top | Configure DBA Non-Sysadmin Group Next |
|---|