UCF STIG Viewer Logo

Administrative privileges should be assigned to database accounts via database roles.


Overview

Finding ID Version Rule ID IA Controls Severity
V-15627 DG0117-SQLServer9 SV-24298r1_rule ECPA-1 Medium
Description
Privileges granted outside the role of the administrative user job function are more likely to go unmanaged or without oversight for authorization. Maintenance of privileges using roles defined for discrete job functions offers improved oversight of administrative user privilege assignments and helps to protect against unauthorized privilege assignment.
STIG Date
Microsoft SQL Server 2005 Instance Security Technical Implementation Guide 2015-06-16

Details

Check Text ( C-28585r1_chk )
Review administrative accounts for direct privilege assignment.

If any administrative privileges have been assigned directly to a database account, this is a Finding.
Fix Text (F-22607r1_fix)
Create roles for administrative function assignments. Assign the necessary privileges for the administrative function to a role.

Assign administrative roles to authorized administrative users.

Document administrative job functions, roles, and required permissions in the System Security Plan.

Maintain evidence of administrative role authorizations.