Enterprise Administration Guide › Implementing Privileged Accounts › PUPM Endpoint and Privileged Account Creation › Create an Endpoint › MS SQL Server Connection Information

MS SQL Server Connection Information

The MS SQL Server endpoint type lets you manage privileged Microsoft SQL Server accounts.

The administrative user that you specify for an MS SQL Server endpoint must:

• Have the securityadmin server role

Note: A user with the securityadmin server role cannot modify serveradmin and sysadmin server roles.

When you create endpoints of this type, provide the following information so that CA Access Control Enterprise Management can connect to the endpoint:

User Login

Defines the name of an administrative user of the endpoint. PUPM uses this account to perform administrative tasks on the endpoint, for example, to connect to the endpoint, discover accounts, and change passwords.

Note the following points:

If you specify the Advanced option, PUPM does not use the User Login account to perform administrative tasks. Instead, PUPM uses the specified privileged account to perform administrative tasks on the endpoint.

Password

Defines the password of the administrative user of the endpoint.

URL

Defines the URL that CA Access Control Enterprise Management can use to connect to the endpoint. The URL specifies a particular type of database server.

Format: jdbc:sqlserver://servername:port

Example: jdbc:sqlserver://localhost:1433

Note: For more information on the format of the URL, see your endpoint documentation.

Host

Defines the host name of the endpoint.

Note: If CA Access Control is installed on the endpoint, we recommend that you specify the CA Access Control host name for this attribute. You can use World View to view the CA Access Control host name of the endpoint.

Port

(Optional) Specifies the server listening port number. The port number that you specify must match the port number that you specify in the URL.

Example: 1433

Instance Name

(Optional) Specifies the database instance name.

Advanced

Specifies whether you want to use a privileged administrative account to perform administrative tasks on the endpoint, for example, to connect to the endpoint, discover accounts, and change passwords. For example, you can specify a privileged domain account that can perform administrative tasks on multiple endpoints.

If you specify this option, PUPM does not use the User Login account to perform administrative tasks.

Disable Exclusive Sessions

Specifies whether to disable the exclusive sessions check on this endpoint. When selected, PUPM does not check for open sessions on the endpoint.

Deny Exclusive Break-Glass

Specifies to block break-glass check-out action on exclusive accounts.