I want to create a policy which enables xp_cmdshell for a specific database. When I choose Database or DatabaseSecurity as my facet I don't get a choice for xp_cmdshell. When I choose ServerSecurity I do.
I've also tried setting it up as a ServiceAreaConfiguration facet but then I don't see anything to select in "targets".
Bottom line, can I enable this for a specific DB or can I only enable it server wide?