SQL Server Proxy Accounts - SQL-FineBuild/Common GitHub Wiki
| Previous SQL Service Accounts | xp_cmdshell Proxy Account Next |
|---|
SQL Server Proxy Accounts allow relevant tasks to be performed using authorities that are different to the normal default values. There are two types of proxy account. The configuration required by each type of proxy is different, and the way the authorities they give are used is different.
-
SQL Server proxy accounts are only required if users without sysadmin rights need to perform certain tasks
-
Users who have sysadmin rights do not need to have any proxies defined for the jobs they run or for xp_cmdshell. Jobs owned by users with sysadmin rights will always run under the security context of the SQL Agent service account, with the exception of any use of xp_cmdshell. Any use of xp_cmdshell by a user with sysadmin rights will always run under the security context of the SQL Server service account
| Proxy Type | Description |
|---|---|
| xp_cmdshell Proxy Account | Required where users without sysadmin rights need to run xp_cmdshell |
| SQL Agent Job Proxy Accounts | Required where users without sysadmin rights need to own SQL Agent jobs |
| Start Job Proxy | Required where users without sysadmin rights need to start a job they do not own |
The Change Proxy Account Password process must be used to change the password of any type of SQL Server Proxy Account.
Copyright FineBuild Team © 2012 - 2020. License and Acknowledgements
| Previous SQL Service Accounts | Top | xp_cmdshell Proxy Account Next |
|---|