Lokasi ngalangkungan proxy:   [ UP ]  
[Ngawartoskeun bug]   [Panyetelan cookie]                
Skip to content

Commit b631127

Browse files
committed
correctness
1 parent ea0cdb9 commit b631127

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

docs/sql-server/azure-arc/configure-least-privilege.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -59,15 +59,15 @@ As listed in prerequisites, the SQL Server service account must be a member of t
5959
- Features are enabled or disabled
6060
- SQL Server instances are added or removed
6161

62-
`Deployer.exe` impersonates the SQL Server service account to connect to SQL Server and add or remove permissions in server and database roles depending on which features are enabled or disabled to ensure that the Azure extension for SQL Server uses the least privileges required. To modify these permissions, the SQL Server service account be a member of the `sysadmin` server role.
62+
`Deployer.exe` impersonates the SQL Server service account to connect to SQL Server and add or remove permissions in server and database roles depending on which features are enabled or disabled to ensure that the Azure extension for SQL Server uses the least privileges required. To modify these permissions, the SQL Server service account must be a member of the `sysadmin` server role.
6363

6464
If you want to manage this process with more control, such that the SQL Server service account is not a member of the sysadmin server role all the time, follow these steps:
6565

6666
1. Temporarily add the SQL Server service account to the sysadmin server role.
6767
1. Allow `Deployer.exe` to run at least once so that the permissions are set.
6868
1. Remove the SQL Server service account from the sysadmin role.
6969

70-
Repeat this procedure any time features are enabled or disabled or SQL Server instances are added to allow `Deployer.exe` to grant the least privileges required.
70+
Repeat this procedure anytime features are enabled or disabled or SQL Server instances are added to allow `Deployer.exe` to grant the least privileges required.
7171

7272
### Tools
7373

0 commit comments

Comments
 (0)