Dev's have RO access through their domain account, but are using SQL login which has SA access to connect to SQL.
Anyway to identify the domain account who connects to SQL using SQL login?
Further on Jason's good reply, why on earth would devs have an sa access to the server, sounds bonkers to me!
😎
While I do share your view, it is really not that uncommon.
I've come across hard coded sa authentication in some in-house developed apps, so nothing surprises me anymore.
That is actually far too common. It is extremely frustrating. The best part is they use that account in plain text config files.
Jason...AKA CirqueDeSQLeil
_______________________________________________
I have given a name to my pain...MCM SQL Server, MVP
SQL RNNR
Posting Performance Based Questions - Gail Shaw[/url]
Learn Extended Events