Description
Manage Microsoft SQL Azure privileged accounts. The plug-in will authenticate to an Microsoft SQL Azure Instance via Microsoft's SQL Server ODBC instant client.
Vendor
This platform is designed for remote account management for the following target:
| Vendor | Microsoft |
|---|---|
| Product | SQL Azure |
| Product Category | Database |
| Product Versions | 12.0.2000.8 |
CyberArk
This platform works with the following CyberArk versions:
| CyberArk Solution | Privileged Credentials Management |
|---|---|
| CyberArk Product | Central Policy Manager (CPM) |
| CyberArk Versions | 9.x, 10.x, 11.x, 12.x, 13.x |
| Artifact Version | 1.0 |
| Out of the Box | NO |
| Out of the Box in versions |
Support & Certification
| Support Level | STANDARD |
|---|---|
| Developed by | CyberArk |
| Certification Level | CERTIFIED |
| Connection Methods | HTTP/HTTPS |
Actions
The following table lists the supported management actions for this platform:
| Action | Supported | Permissions |
|---|---|---|
| Verify | YES | |
| Change | YES | |
| Reconcile | YES | |
| Delete | NO |
Linked Accounts
The following linked accounts are in use by the plugin.
Logon Account
| Supported | NO |
|---|---|
| Required | NO |
| Platforms | |
| Permissions |
Reconcile Account
| Supported | YES |
|---|---|
| Required | NO |
| Platforms | |
| Permissions |
Prerequisites
The following prerequisites are required on the machine that runs this plugin:
Microsoft SQL Server 32-bit ODBC Driver (v18.3) installed on the CPM machine. Verify that the firewall rules \ ports are opened to the Azure SQL instance by testing the ODBC Driver on the CPM machine
Configuration
Platform Settings
Specify the following parameters at the platform level:
| Parameter Name | Description | Acceptable Values | Default Value |
|---|---|---|---|
| Port | The port used to connect to the SQL Azure instance | Integer | 1433 |
| ConnectionCommand | The ODBC connection string which will include the ODBC Driver and connection details | Yes, No | Driver={ODBC Driver 18 for SQL Server};Server=%ADDRESS%;Database=%DATABASE%;Uid=%USER%;Pwd=%LOGONPASSWORD%; |
| ChangeCommand | The legal SQL statement template that will be used to change the password on the required database. | SQL Statement | ALTER LOGIN %USER% WITH PASSWORD = '%newpassword%' OLD_PASSWORD='%oldpassword%'; |
| ReconcileCommand | The legal SQL statement template that will be used to reconcile the password on the required database. | SQL Statement | ALTER LOGIN %USER% WITH PASSWORD = '%newpassword%'; |
| Debug | To enable debug logs | Yes, No | No |
Account Settings
Account Mandatory Parameters
Specify the following parameters on the account:
| Parameter Name | Description |
|---|---|
| Username | Username of the target account |
| Address | Address of the SQL Azure Database instance |
| Database | The name of the database that the user is stored under |