You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/purview/register-scan-on-premises-sql-server.md
+9-12Lines changed: 9 additions & 12 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -40,33 +40,30 @@ This section describes how to register an on-premises SQL server instance in Azu
40
40
41
41
### Authentication for registration
42
42
43
-
There are two ways to set up authentication for SQL server on-premises:
43
+
There is only one way to set up authentication for SQL server on-premises:
44
44
45
45
- SQL Authentication
46
-
- Windows Authentication
47
46
48
-
#### Set up SQL server authentication
47
+
#### SQL Authentication to register
49
48
50
-
If SQL Authentication is applied, ensure the SQL Server deployment is configured to allow SQL Server and Windows Authentication.
49
+
Ensure the SQL Server deployment is configured to allow SQL Server and Windows Authentication.
51
50
52
51
To enable this, within SQL Server Management Studio (SSMS), navigate to "Server Properties" and change from "Windows Authentication Mode" to "SQL Server and Windows Authentication mode".
53
52
54
53
:::image type="content" source="media/register-scan-on-premises-sql-server/enable-sql-server-authentication.png" alt-text="The Server Properties window is open with the security page selected. Under Server authentication, S Q L Server and Windows Authentication mode is selected.":::
55
54
56
-
If Windows Authentication is applied, configure the SQL Server deployment to use Windows Authentication mode.
57
-
58
55
A change to the Server Authentication will require a restart of the SQL Server Instance and SQL Server Agent, this can be triggered within SSMS by navigating to the SQL Server instance and selecting "Restart" within the right-click options pane.
59
56
60
57
##### Creating a new login and user
61
58
62
59
If you would like to create a new login and user to be able to scan your SQL server, follow the steps below:
63
60
64
-
The account must have access to the **master** database. This is because the `sys.databases` is in the master database. The Azure Purview scanner needs to enumerate `sys.databases` in order to find all the SQL databases on the server.
61
+
The SQL account must have access to the **master** database. This is because the `sys.databases` is in the master database. The Azure Purview scanner needs to enumerate `sys.databases` in order to find all the SQL databases on the server.
65
62
66
63
> [!Note]
67
64
> All the steps below can be executed using the code provided [here](https://github.com/Azure/Purview-Samples/blob/master/TSQL-Code-Permissions/grant-access-to-on-prem-sql-databases.sql)
68
65
69
-
1. Navigate to SQL Server Management Studio (SSMS), connect to the server, navigate to security, select and hold (or right-click) on login and create New login. If Windows Authentication is applied, select "Windows authentication". If SQL Authentication is applied, make sure to select "SQL authentication".
66
+
1. Navigate to SQL Server Management Studio (SSMS), connect to the server, navigate to security, select and hold (or right-click) on login and create New login. Make sure to select "SQL authentication".
70
67
71
68
:::image type="content" source="media/register-scan-on-premises-sql-server/create-new-login-user.png" alt-text="Create new login and user.":::
72
69
@@ -78,7 +75,7 @@ The account must have access to the **master** database. This is because the `sy
78
75
79
76
1. Select OK to save.
80
77
81
-
1.If SQL Authentication is applied, navigate again to the user you created, by selecting and holding (or right-clicking) and selecting **Properties**. Enter a new password and confirm it. Select the 'Specify old password' and enter the old password. **It is required to change your password as soon as you create a new login.**
78
+
1.Navigate again to the user you created, by selecting and holding (or right-clicking) and selecting **Properties**. Enter a new password and confirm it. Select the 'Specify old password' and enter the old password. **It is required to change your password as soon as you create a new login.**
@@ -88,7 +85,7 @@ The account must have access to the **master** database. This is because the `sy
88
85
1. Select **+ Generate/Import** and enter the **Name** and **Value** as the *password* from your SQL server login
89
86
1. Select **Create** to complete
90
87
1. If your key vault is not connected to Azure Purview yet, you will need to [create a new key vault connection](manage-credentials.md#create-azure-key-vaults-connections-in-your-azure-purview-account)
91
-
1. Finally, [create a new credential](manage-credentials.md#create-a-new-credential) using the **username** and **password** to set up your scan. Make sure the right authentication method is selected when creating a new credential. If SQL Authentication is applied, select "SQL authentication" as the authentication method. If Windows Authentication is applied, then select "Windows authentication".
88
+
1. Finally, [create a new credential](manage-credentials.md#create-a-new-credential) using the **username** and **password** to set up your scan.
92
89
93
90
### Steps to register
94
91
@@ -122,9 +119,9 @@ To create and run a new scan, do the following:
122
119
123
120
1. Select **New scan**
124
121
125
-
1. Select the credential to connect to your data source. The credentials are grouped and listed under different authentication methods.
122
+
1. Select the credential to connect to your data source.
126
123
127
-
:::image type="content" source="media/register-scan-on-premises-sql-server/on-premises-sql-set-up-scan-win-auth.png" alt-text="Set up scan":::
124
+
:::image type="content" source="media/register-scan-on-premises-sql-server/on-premises-sql-set-up-scan.png" alt-text="Set up scan":::
128
125
129
126
1. You can scope your scan to specific tables by choosing the appropriate items in the list.
0 commit comments