Creating a template account
Bravura Security Fabric uses template accounts as models or "blueprints" for creating new SQL Server accounts. This section provides examples to illustrate how you can create a template account on your SQL Server server.
Login types
The types of logins are as follows:
Windows User – a user whose account already exists in a Windows NT or Microsoft Active Directory domain and is granted access to the SQL Server. See Creating a template account for a Windows User login .
Standard – a user whose account is stored on the SQL Server and is separate from any Windows domain. See Creating a template account for a Standard login .
Windows Group – the name of a Windows server or Active Directory group. All members of the group can connect to SQL Server using Windows authentication.
This type of login cannot be managed by
agtsql. Instead you should use the Microsoft Windows server or Active Directory target system types. See Granting access by Windows group membership .
Creating a template account for a Windows User login
Use the following procedure to grant a Windows user account access to a SQL Server system. See your SQL Server system administrator or SQL Server documentation for more information if required.
To create a template account for a Windows user:
Start SQL Server Enterprise Manager.
Expand Console Root > Microsoft SQL Servers > <server group> > <server name> > Security.
Where <server name> is the name of the SQL Server target system, and <server group> is the server group to which the target belongs.
Right-click Logins, then select New Login.
The SQL Server Login Properties - New Login window displays.
Select the General tab if it does not have focus.
Ensure the Windows Authentication method is selected.
In the Name field, type the Windows user ID for the account being used as the template, or click the Browse button to the right of the field and select the user ID.
The Windows Authentication Domain automatically completes depending on what is entered in the Name field.
For Security access, ensure the Grant access radio button is selected.
The Default database is already set, but if required, you can change it to a database of your choice.
Select the Server Roles tab and assign the appropriate server roles in the Server Roles list box.
Click the Database Access tab and assign the individual databases to which the template should have access.
In the Permit in Database Role list box, select the appropriate permissions.
Click OK.
Creating a template account for a Standard login
Use the following procedure to create a standard user account on an SQL Server system. See your SQL Server system administrator or SQL Server documentation for more information.
To create a template account for a Standard user:
Start SQL Server Enterprise Manager.
Expand Console Root > Microsoft SQL Servers > <server group> > <server name> > Security.
Where <server name> is the name of the SQL Server target system, and <server group> is the server group to which the target belongs.
Right-click Logins, then select New Login.
The SQL Server Login Properties - New Login window displays.
Select the General tab if it does not currently have focus.
In the Name field, type a Standard user ID.
For Authentication, select SQL Server Authentication.
You are prompted to assign a password.
Type a password of your choice in the Password field and press Enter.
You are prompted to confirm the password.
For Security access, ensure the Grant access radio button is selected.
The Default database is already set, but if required, change it to a database of your choice.
Click the Server Roles tab and assign the appropriate server roles using the Server Roles list box.
Click the Database Access tab and assign the individual databases to which the template should have access.
In the Permit in Database Role list box, select the appropriate permissions.
Click OK.