locked
Choosing a user domain as principal of a proxy account RRS feed

  • Question

  • Hi all,

    I'd like to create a proxy for executing SSIS package from SQL Agent.

    I created a credential linked to a sysadmin user. I linked this credential to the proxy account. Now I'd like to add a principal to the proxy choosing it not from SQL Login but as a user domain.

    Is it possible or my question is stupid?

     

    Thanks in advance,

     

     Alessandro

    Tuesday, February 1, 2011 10:53 AM

Answers

  • Hi alecatta,

     

    First you need add these users into SQL Server as logins, and then these user would appeared in the list under SQL Login principals type.

     

    Per the Books Online:(http://msdn.microsoft.com/en-us/library/ms189064.aspx)

     

    A user must have access to a proxy to use the proxy in a job step. Access can be granted to three types of security principals:

     

    ·         SQL Server logins

    ·         Server roles

    ·         Roles within the msdb database

     

    If the login for the user has access to the proxy, or the user belongs to any role with access to the proxy, the user can use the proxy in a job step.

     

    If there are any questions, please feel free to ask.

     

    Thanks,
    Weilin Qiao


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. This can be beneficial to other community members reading the thread.
    • Marked as answer by WeiLin Qiao Monday, February 14, 2011 10:58 AM
    Thursday, February 3, 2011 10:37 AM
  • Try this:

    1. add new login, put '<user-domain>\Domain Users' to have public permission

    2. Create a credential for your agent jobs

    3. set up proxy

     

    Good luck.


    Sevengiants.com
    • Marked as answer by WeiLin Qiao Monday, February 14, 2011 10:58 AM
    Thursday, February 3, 2011 3:34 PM

All replies

  • http://support.microsoft.com/kb/912911

    See method 2


    Best Regards, Uri Dimant SQL Server MVP http://dimantdatabasesolutions.blogspot.com/ http://sqlblog.com/blogs/uri_dimant/
    Tuesday, February 1, 2011 11:32 AM
  • you mean a user domain (all users in a domain), or a domain user?

    Sevengiants.com
    Tuesday, February 1, 2011 12:14 PM
  • User domain
    Best Regards, Uri Dimant SQL Server MVP http://dimantdatabasesolutions.blogspot.com/ http://sqlblog.com/blogs/uri_dimant/
    Tuesday, February 1, 2011 12:54 PM
  • I mean user@domain through the user authenticates homself on the machine.

    I'm trying to understand if it is mandatory to have the SQL Login to associate to the proxy server.

    When I have to associate the proxy to a principal, can I select a domain user instead of a SQL login?

     

    Tuesday, February 1, 2011 1:40 PM
  • Hi alecatta,

     

    First you need add these users into SQL Server as logins, and then these user would appeared in the list under SQL Login principals type.

     

    Per the Books Online:(http://msdn.microsoft.com/en-us/library/ms189064.aspx)

     

    A user must have access to a proxy to use the proxy in a job step. Access can be granted to three types of security principals:

     

    ·         SQL Server logins

    ·         Server roles

    ·         Roles within the msdb database

     

    If the login for the user has access to the proxy, or the user belongs to any role with access to the proxy, the user can use the proxy in a job step.

     

    If there are any questions, please feel free to ask.

     

    Thanks,
    Weilin Qiao


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. This can be beneficial to other community members reading the thread.
    • Marked as answer by WeiLin Qiao Monday, February 14, 2011 10:58 AM
    Thursday, February 3, 2011 10:37 AM
  • Try this:

    1. add new login, put '<user-domain>\Domain Users' to have public permission

    2. Create a credential for your agent jobs

    3. set up proxy

     

    Good luck.


    Sevengiants.com
    • Marked as answer by WeiLin Qiao Monday, February 14, 2011 10:58 AM
    Thursday, February 3, 2011 3:34 PM