Lower permission


Lower permission

R

Hello,
It could be possible to give a lower privilege to the service account other than
Control server role, maintaining its usage?
Thank you
Tamas Lengyel

Reply - 9/28/2018
Hello,
It could be possible to give a lower privilege to the service account other than
Control server role, maintaining its usage?
Thank you

See SQL Control Server permission section in the Getting Started guide.

Please note that the Control Server role is required on the SQL Server that is processing the audit logs, not on the SQL Server that is generating them. For example, let say, you want to audit a SQL Server 2014 instance on server-1. You setup auditing and make the audit files accessible to server-2 (for example a shared folder on server-2). Install LOGbinder on server-2 and also install SQL Server Express 2014 or later on server-2. Now you need to give the LOGbinder service account Server Control role on the SQL Server Express on server-2 only. Once we have the audit files generated by the SQL Server on server-1, we don't need to touch that instance anymore. The processing can take place by another SQL Server installation.

https://www.logbinder.com/images/blog/LBsqlblog.png

R

Tamas Lengyel - 9/29/2018
Reply - 9/28/2018
Hello,
It could be possible to give a lower privilege to the service account other than
Control server role, maintaining its usage?
Thank you

See SQL Control Server permission section in the Getting Started guide.

Please note that the Control Server role is required on the SQL Server that is processing the audit logs, not on the SQL Server that is generating them. For example, let say, you want to audit a SQL Server 2014 instance on server-1. You setup auditing and make the audit files accessible to server-2 (for example a shared folder on server-2). Install LOGbinder on server-2 and also install SQL Server Express 2014 or later on server-2. Now you need to give the LOGbinder service account Server Control role on the SQL Server Express on server-2 only. Once we have the audit files generated by the SQL Server on server-1, we don't need to touch that instance anymore. The processing can take place by another SQL Server installation.

https://www.logbinder.com/images/blog/LBsqlblog.png

Thank you, very clear!
GO


Similar Topics


Reading This Topic


Login
Existing Account
Email Address:


Password:


Select a Forum....








LOGbinder Forum


Search