How to Create a Least Privileged User for Windows Integrated Authentication Connection

Products

• VMware Aria Suite

Issue/Introduction

This knowledge article is intended to help with the setup and configuration of the Microsoft SQL Server Management Pack when using the Windows Integrated Authentication (WIA) connection method. For additional information on setup and requirements, refer to the Installation Guide .

Prerequisites:

• When selecting the host endpoint in adapter configuration, be sure to specify the Virtual IP Address (VIP) or Hostname of the SQL Server Cluster.
• SQL Browser Service must be running on the targeted SQL Server host.

Environment

VMware vRealize True Visibility Suite 1.0

Resolution

Creating the Login Account:

1. Login to Microsoft SQL Server Management Studio with "sa" or administrative privileges.
2. Expand the top-level navigation for the database instance.
3. Expand Security and Logins.
4. Right-click on Logins and select New Login...
5. Select the Windows Authentication radial.
6. Open the Search... box and search for the Windows login to be used for the monitoring connection.
7. Click OK to save. 

Granting Permissions:

1. Right-click on the top level Database Instance navigation and select New Query.
2. Enter the following query, resolves any errors listed in the Message box.

GRANT VIEW ANY DEFINITION to [DOMAIN\user]
GO
GRANT VIEW SERVER STATE to [DOMAIN\user]
GO
GRANT VIEW DATABASE STATE to [DOMAIN\user]
GO