SQL Server Proxy Accounts

Previous SQL Service Accounts	xp_cmdshell Proxy Account Next

SQL Server Proxy Accounts allow relevant tasks to be performed using authorities that are different to the normal default values. There are two types of proxy account. The configuration required by each type of proxy is different, and the way the authorities they give are used is different.

• SQL Server proxy accounts are only required if users without sysadmin rights need to perform certain tasks

• Users who have sysadmin rights do not need to have any proxies defined for the jobs they run or for xp_cmdshell. Jobs owned by users with sysadmin rights will always run under the security context of the SQL Agent service account, with the exception of any use of xp_cmdshell. Any use of xp_cmdshell by a user with sysadmin rights will always run under the security context of the SQL Server service account

Proxy Type	Description
xp_cmdshell Proxy Account	Required where users without sysadmin rights need to run xp_cmdshell
SQL Agent Job Proxy Accounts	Required where users without sysadmin rights need to own SQL Agent jobs
Start Job Proxy	Required where users without sysadmin rights need to start a job they do not own

The Change Proxy Account Password process must be used to change the password of any type of SQL Server Proxy Account.

Copyright FineBuild Team © 2012 - 2020. License and Acknowledgements

Previous SQL Service Accounts	Top	xp_cmdshell Proxy Account Next