Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Administrative privileges should be assigned to database accounts via database roles.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-15627 | DG0117-SQLServer9 | SV-24298r1_rule | ECPA-1 | Medium |
| Description |
|---|
| Privileges granted outside the role of the administrative user job function are more likely to go unmanaged or without oversight for authorization. Maintenance of privileges using roles defined for discrete job functions offers improved oversight of administrative user privilege assignments and helps to protect against unauthorized privilege assignment. |
| STIG | Date |
|---|---|
| Microsoft SQL Server 2005 Instance Security Technical Implementation Guide | 2015-06-16 |
Details
| Check Text ( C-28585r1_chk ) |
|---|
| Review administrative accounts for direct privilege assignment. If any administrative privileges have been assigned directly to a database account, this is a Finding. |
| Fix Text (F-22607r1_fix) |
|---|
| Create roles for administrative function assignments. Assign the necessary privileges for the administrative function to a role. Assign administrative roles to authorized administrative users. Document administrative job functions, roles, and required permissions in the System Security Plan. Maintain evidence of administrative role authorizations. |