luxolus
/
open-vault
2
0
Fork 0
Code Issues 1 Pull Requests Releases Activity

backport of commit 3acfa450c2605226418c7dad00b39cbfb857f7b4 (#22104) 

Co-authored-by: Ellie <ellie.sterner@hashicorp.com>
This commit is contained in:
hc-github-team-secure-vault-core 2023-07-27 18:39:23 -04:00 committed by GitHub
parent 9e3ace5fd7
commit de7636049b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
website/content/docs/secrets/databases/mssql.mdx
View File

@ -17,6 +17,24 @@ the MSSQL database.
See the [database secrets engine](/vault/docs/secrets/databases) docs for
more information about setting up the database secrets engine.
The following privileges are needed by the plugin for minimum functionality. Additional privileges may be needed
depending on the SQL configured on the database roles.
```sql
-- Create Login
CREATE LOGIN vault_login WITH PASSWORD = '<password>';
-- Create User
CREATE user vault_user for login vault_login;
-- Grant Permissions
GRANT ALTER ANY LOGIN TO "vault_user";
GRANT ALTER ANY USER TO "vault_user";
GRANT ALTER ANY CONNECTION TO "vault_login";
GRANT CONTROL ON SCHEMA::dbo TO "vault_user";
EXEC sp_addrolemember "db_accessadmin", "vault_user";
```
## Capabilities
| Plugin Name | Root Credential Rotation | Dynamic Roles | Static Roles | Username Customization |