SQL server proxy

Dear all,

our company use SQL server proxy and another separate account to do a backup and put the file in another file directory.

any benefit to use SQL server proxy for this purpose ?
LVL 1
marrowyungSenior Technical architecture (Data)Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Brian CroweDatabase AdministratorCommented:
Basically it's a way to give specific access, generally to server resources, that you don't want to give to say the sql_agent service.  Here is an article that helps explain it.

http://sqlmag.com/blog/sql-server-dba-tip-credentials-and-proxies
0
ste5anSenior DeveloperCommented:
What do you mean with "SQL server proxy"?
0
marrowyungSenior Technical architecture (Data)Author Commented:
ste5an,

as I am on new job now and right now I am porking around everything and the DBA in US just told me that.

this is from him:

"create two domain accounts.
One called xxx
For now the xxx will need read/write rights to the \\yyy directory and subdirectories.
And another called
yyy
I will get back with you on the yyy rights.
 
we will want to create a proxy on this server and ultimately use that for restores on that taskAgent job.
So do what you can until we get the proxies complete.
"

this is what I got, and he also said:

"The restore job will use the proxy so that a service Account does not have to be linked to it."

so please tell me why he'd like to do it (he is a very experience US DBA), and as Brian said,
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

ste5anSenior DeveloperCommented:
Especially then it is important, that you work with accurate definitions.

A proxy in general can be anything. E.g. an proxy server or a SQL Server Agent Proxy.

Your first post does not specify that further. Your second post sounds like you're talking about SQL Server Agent Proxy.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
marrowyungSenior Technical architecture (Data)Author Commented:
"Your second post sounds like you're talking about SQL Server Agent Proxy. "

after his second email then I also think it is SQL server agent proxy, any use of it and what if we don't use it ? what will be the problem ?

this one, http://sqlmag.com/blog/sql-server-dba-tip-credentials-and-proxies, is about create the account but any more complete document on how to manage it:
1) monitor the use of it
2) change it (i.e. setup account and path)
3) backup the proxy
0
Brian CroweDatabase AdministratorCommented:
Some unsolicited advice:

Honestly I would recommend having this conversation with your "very experience US DBA".  I recognize it can be uncomfortable admitting you don't know something especially to a coworker but no one is born with this knowledge and at one point someone taught him.  Anything we tell you is likely to only partially explain how your local processes work.
0
marrowyungSenior Technical architecture (Data)Author Commented:
excellent, but I just tried to learn something new.
0
marrowyungSenior Technical architecture (Data)Author Commented:
I read the article:

http://www.experts-exchange.com/questions/28723699/SQL-server-proxy.html

"Of course, assuming they did take over your job step and now have carte blanche with the Proxy you've given them… the idea is that they shouldn't be able to do very much at ALL with this proxy—because you explicitly created the proxy against a least-privilege account which can't do much more than what you created it to do "

so the actually permission is controlled by the "Active to the following subsystems:" item in the list ? or the permission of the account setup in the security node?

again, just want to see how the permission is handle by using proxy and what the logic behind this.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft SQL Server

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.