Impersonate possible for a security group?

SQLServerCentral is supported by Red Gate Software Ltd.

Popular Topics

Home

Members

Calendar

Who's On

Home » SQL Server 2008 » SQL Server 2008 - General » Impersonate possible for a security group?

Impersonate possible for a security group?

Rate Topic

Display Mode

Topic Options

Author

Message

gordon.raebiger

Posted Thursday, March 21, 2013 11:10 AM

Forum Newbie

Group: General Forum Members
Last Login: Thursday, March 21, 2013 1:33 PM
Points: 1, Visits: 2

Hi everyone,

I was thinking of publishing some Table Reports with an online connection to my MSSQL server.
All of that works fine...

Now I was hoping to use my security groups to manage the access to the database.
When trying to use the security group as shown below it does not work - probably because that is only for users - however I was not able to find syntax for a group.

GRANT IMPERSONATE ON USER::[my_domain\gordon] to [my_domain\tableau];

Any advise is much appriciated.

Cheers,
Gordon

Post #1433921

arbcoll

Posted Sunday, April 07, 2013 1:04 PM

Forum Newbie

Group: General Forum Members
Last Login: Saturday, April 27, 2013 3:02 PM
Points: 8, Visits: 82

Hi Gordon,

Unfortunately, this is not possible currently in SQL Server. SQL Server (for some reason) cannot read members out of the AD group configured as a login in SQL Server itself (both AD and SQL Server are Microsoft products, right Crazy

?).
The impersonation is possible only when the impersonated login exists in sys.server_principals.

Check the similar topic at http://www.sqlservercentral.com/Forums/Topic1434100-1526-2.aspx.

Post #1439657

arbcoll

Posted Sunday, April 07, 2013 1:11 PM

Forum Newbie

Group: General Forum Members
Last Login: Saturday, April 27, 2013 3:02 PM
Points: 8, Visits: 82

...just to add that the syntax for the login in fact completes successfully:

use master
go
GRANT IMPERSONATE ON login::[domain\Security Group] TO [domain\User]
go

but then, when launching EXECUTE AS to impersonate an individual login, a member of [domain/Security Group], SQL Server cannot identify it!

Post #1439660

« Prev Topic | Next Topic »

Permissions