Table of Contents

Search

  1. Preface
  2. Introduction to Dynamic Data Masking Administration
  3. Authentication
  4. Security
  5. Connection Management
  6. JDBC Client Configuration
  7. ODBC Client Configuration
  8. Configuration for MicroStrategy
  9. Access Control
  10. Logs
  11. High Availability
  12. Server Control
  13. Performance Tuning
  14. Troubleshooting
  15. Appendix A: Database Keywords

Administrator Guide

Administrator Guide

Microsoft SQL Server Authentication-Based User as Administrator

Microsoft SQL Server Authentication-Based User as Administrator

Log in as the system administrator in the master database and run the following command:
CREATE LOGIN <DDM_Admin_Login> WITH PASSWORD=<DDM_Admin_Login_password>
Log in as the system administrator in the target database and run the following commands:
  • CREATE USER <DDM_Admin_User> FOR LOGIN <DDM_Admin_Login>;
  • ALTER ROLE db_datareader ADD MEMBER <DDM_Admin_User>;
  • GRANT VIEW DATABASE STATE TO <DDM_Admin_User>;

Additional Privileges for SELECT * Statements

If your Dynamic Data Masking security rules need to support column masking on SELECT * statements, you must also run the following command:
GRANT CONTROL TO <DDM_Admin_User>
Alternatively, you can run the following commands:
  • GRANT ALTER ANY USER TO <DDM_Admin_User>
  • GRANT IMPERSONATE ON USER :: <DDM_User> TO <DDM_Admin_User>

0 COMMENTS

We’d like to hear from you!