You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
[!INCLUDE [SQL Server SQL MI](../../includes/applies-to-version/sql-asdbmi.md)]
20
-
21
-
> [!IMPORTANT]
22
-
> On [Azure SQL Managed Instance](/azure/sql-database/sql-database-managed-instance), most, but not all SQL Server Agent features are currently supported. See [Azure SQL Managed Instance T-SQL differences from SQL Server](/azure/sql-database/sql-database-managed-instance-transact-sql-information#sql-server-agent) for details.
This topic describes how to create a SQL Server Agent proxy in [!INCLUDE[ssnoversion](../../includes/ssnoversion-md.md)] by using SQL Server Management Studio or [!INCLUDE[tsql](../../includes/tsql-md.md)].
25
21
26
22
A [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] Agent proxy account defines a security context in which a job step can run. Each proxy corresponds to a security credential. To set permissions for a particular job step, create a proxy that has the required permissions for a [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] Agent subsystem, and then assign that proxy to the job step.
23
+
24
+
On [Azure SQL Managed Instance](/azure/sql-database/sql-database-managed-instance), most, but not all SQL Server Agent features are currently supported. See [Azure SQL Managed Instance T-SQL differences from SQL Server](/azure/sql-database/sql-database-managed-instance-transact-sql-information#sql-server-agent) or [SQL Agent job limitations in SQL Managed Instance](/azure/azure-sql/managed-instance/job-automation-managed-instance#sql-agent-job-limitations-in-sql-managed-instance) for details.
25
+
27
26
## <aname="BeforeYouBegin"></a>Before You Begin
28
27
29
28
### <aname="Restrictions"></a>Limitations and Restrictions
30
29
31
30
- You must create a credential before you create a proxy if one is not already available.
32
31
33
-
-[!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] Agent proxies use credentials to store information about Windows user accounts. The user specified in the credential must have "Access this computer from the network" permission (SeNetworkLogonRight) on the computer on which [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] is running.
32
+
-[!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] Agent proxies use credentials to store information about Windows user accounts. The user specified in the credential must have "Access this computer from the network" permission (`SeNetworkLogonRight`) on the computer on which [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] is running.
34
33
35
-
-[!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] Agent checks subsystem access for a proxy and gives access to the proxy each time the job step runs. If the proxy no longer has access to the subsystem, the job step fails. Otherwise, [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] Agent impersonates the user that is specified in the proxy and runs the job step.
34
+
-[!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] Agent checks subsystem access for a proxy and gives access to the proxy each time the job step runs. If the proxy no longer has access to the subsystem, the job step fails. Otherwise, [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] Agent impersonates the user that is specified in the proxy and runs the job step. For a list of proxy subsystems, see [sp_grant_proxy_to_subsystem](/sql/relational-databases/system-stored-procedures/sp-grant-proxy-to-subsystem-transact-sql).
36
35
37
36
- Creation of a proxy does not change the permissions for the user that is specified in the credential for the proxy. For example, you can create a proxy for a user that does not have permission to connect to an instance of [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)]. In this case, job steps that use that proxy are unable to connect to [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)].
38
37
@@ -42,17 +41,17 @@ A [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] Agent proxy account
42
41
43
42
#### <aname="Permissions"></a>Permissions
44
43
45
-
- Only members of the **sysadmin** fixed server role have permission to create, modify, or delete proxy accounts. Users who are not members of the **sysadmin** fixed server role must be added to one of the following [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] Agent fixed database roles in the **msdb** database to use proxies: **SQLAgentUserRole**, **SQLAgentReaderRole**, or **SQLAgentOperatorRole**.
44
+
- Only members of the **sysadmin** fixed server role have permission to create, modify, or delete proxy accounts. Users who are not members of the **sysadmin** fixed server role must be added to one of the following [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] Agent fixed database roles in the `msdb` database to use proxies: **SQLAgentUserRole**, **SQLAgentReaderRole**, or **SQLAgentOperatorRole**.
46
45
47
46
- Requires **ALTER ANY CREDENTIAL** permission if creating a credential in addition to the proxy.
48
47
49
-
## <aname="SSMSProcedure"></a>Using SQL Server Management Studio
48
+
## <aname="SSMSProcedure"></a>Use SQL Server Management Studio (SSMS)
50
49
51
50
#### To create a SQL Server Agent proxy
52
51
53
-
1. In **Object Explorer**, click the plus sign to expand the server where you want to create a proxy on SQL Server Agent.
52
+
1. In **Object Explorer**, select the plus sign to expand the server where you want to create a proxy on SQL Server Agent.
54
53
55
-
2.Click the plus sign to expand **SQL Server Agent**.
54
+
2.Select the plus sign to expand **SQL Server Agent**.
56
55
57
56
3. Right-click the **Proxies** folder and select **New Proxy**.
58
57
@@ -66,17 +65,17 @@ A [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] Agent proxy account
66
65
67
66
8. On the **Principals** page, add or remove logins or roles to grant or remove access to the proxy account.
68
67
69
-
9. When finished, click**OK**.
68
+
9. When finished, select**OK**.
70
69
71
-
## <aname="TsqlProcedure"></a>Using Transact-SQL
70
+
## <aname="TsqlProcedure"></a>Use Transact-SQL
72
71
73
72
#### To create a SQL Server Agent proxy
74
73
75
74
1. In **Object Explorer**, connect to an instance of [!INCLUDE[ssDE](../../includes/ssde_md.md)].
76
75
77
-
2. On the Standard bar, click**New Query**.
76
+
2. On the Standard bar, select**New Query**.
78
77
79
-
3. Copy and paste the following example into the query window and click**Execute**.
78
+
3.The following script creates a credential called `CatalogApplicationCredential`, creates proxy `Catalog application proxy` and assigns the credential `CatalogApplicationCredential` to it, and grants the proxy access to the ActiveX Scripting subsystem. Copy and paste the following example into the query window and select**Execute**.
0 commit comments