Authentication issues
dippies
Posts: 10
Hi All,
new_bee question.
When installing deployment manager I can choose between either SQL auth or windows auth.
I understand that if I want to use windows auth it will use the machine account (connecting as networkservice I assume).
This is not ideal for security purposes, as it means whoever is logged on to the machine will connect to SQL using whatever permissions are required by deployment manager, which would be sysadmin.
Is there no way to have the deployment manager connect to the target machine using integrated security (ie, using the credentials of the currently logged on user)? If not, it seems there is no way to ensure that people using deployment manager are in fact, for example, database administrators.
thanks
dippies
new_bee question.
When installing deployment manager I can choose between either SQL auth or windows auth.
I understand that if I want to use windows auth it will use the machine account (connecting as networkservice I assume).
This is not ideal for security purposes, as it means whoever is logged on to the machine will connect to SQL using whatever permissions are required by deployment manager, which would be sysadmin.
Is there no way to have the deployment manager connect to the target machine using integrated security (ie, using the credentials of the currently logged on user)? If not, it seems there is no way to ensure that people using deployment manager are in fact, for example, database administrators.
thanks
dippies
Comments
Unfortunately Deployment Manager does not support impersonation for SQL connections. You can use the Project teams feature to control who can deploy projects to particular environments (this feature is only available in the paid for edition)
Robin
Test Engineer
DLM Automation