Administrator Guide

Back Next

Microsoft SQL Server Dynamic Data Masking Administrator Required Privileges

The Dynamic Data Masking administrator must have privileges to access sensitive tables and columns.

USE master;

CREATE LOGIN <DDM Admin> WITH PASSWORD=<DDM Admin password>, DEFAULT_DATABASE = <default database>;

GRANT CONTROL SERVER TO <DDM Admin>;

USE <default database>;

CREATE USER <database user> FOR LOGIN <DDM Admin>;

If your Dynamic Data Masking security rules need to support column masking on SELECT * statements, you must also run the following command:

GRANT CONTROL SERVER TO <DDM Admin>

Alternatively, you can run the following commands:

USE <client user catalog>

CREATE USER <DDM Admin>

FOR LOGIN <DDM Admin> WITH DEFAULT_SCHEMA=<default schema>

USE master

GRANT VIEW SERVER STATE TO <DDM Admin login>

GRANT IMPERSONATE ON LOGIN :: <client user login> TO <DDM Admin login>

Watch

Comments

0 COMMENTS

We’d like to hear from you! Log in to comment.