|
2 | 2 | author: ajithkr-ms
|
3 | 3 | ms.service: sql-database
|
4 | 4 | ms.topic: include
|
5 |
| -ms.date: 12/19/2022 |
| 5 | +ms.date: 04/12/2023 |
6 | 6 | ms.author: ajithkr-ms
|
7 | 7 | ---
|
8 | 8 |
|
@@ -32,13 +32,14 @@ The login used to connect to a source SQL Server instance needs certain minimal
|
32 | 32 | |All User Databases|VIEW DATABASE STATE||
|
33 | 33 | |All User Databases|SELECT|sys.sql_expression_dependencies|
|
34 | 34 |
|
35 |
| -## Special considerations for Always On Avalability Groups |
36 |
| -For SQL Server instances that host availability group replicas, it's recommended to provision a Windows Domain accounts with required permissions for assessment. |
| 35 | +## Special considerations for Always On Availability Groups |
| 36 | +For SQL Server instances that host availability group replicas, it's recommended to provision a Windows Domain account with required permissions for assessment. |
37 | 37 |
|
38 |
| -When SQL Server Authentication or a local Windows login is used, mismatched SIDs can prevent the custom login from resolving on the other replicas of the Always On Availability Group. To prevent this issue, after the login is created on the first of all the instances that hosts an Always On Availability Group, note the SID of the login so created. Provide this SID as a parameter when creating the login in the instances hosting the remaining replicas of the Always On Availability Group. |
| 38 | +When SQL Server Authentication or a local Windows login is used, mismatched SIDs can prevent the custom login from resolving on the other replicas of the Always On Availability Group. To prevent this issue, after the login is created on the first of all the instances that host an Always On Availability Group, note the SID of the login created. Provide this SID as a parameter when creating the login in the instances hosting the remaining replicas of the Always On Availability Group. |
39 | 39 |
|
40 | 40 | ## Configure the custom login for Assessment
|
41 |
| -The following are example scripts that show creation of a login and provisioning it with the requisite permissions. |
| 41 | + |
| 42 | +The following are sample scripts for creating a login and provisioning it with the necessary permissions. |
42 | 43 |
|
43 | 44 | ### Windows Authentication
|
44 | 45 |
|
@@ -168,11 +169,12 @@ The following are example scripts that show creation of a login and provisioning
|
168 | 169 |
|
169 | 170 | ## How to use the permissions script
|
170 | 171 |
|
171 |
| -The script above can be used as follows: |
| 172 | +The permissions script can be used as follows: |
| 173 | + |
172 | 174 | - Save the appropriate permissions script (with valid password string) as an _.sql_ file, say _c:\workspace\MinPermissions.sql_
|
173 | 175 | - Connect to the instance(s) using an account with sysadmin permissions and execute the script. You can use **SQL Server Management Studio** or **sqlcmd**. The following example uses a trusted connection.
|
174 | 176 |
|
175 | 177 | ```cmd
|
176 | 178 | sqlcmd.exe -S sourceserver\sourceinstance -d master -E -i c:\workspace\MinPermissions.sql
|
177 | 179 | ```
|
178 |
| -- Use the minimal permissions account so created for further connections. |
| 180 | +- Use the minimal permissions account for further connections. |
0 commit comments