| title | sp_revoke_proxy_from_subsystem (Transact-SQL) | Microsoft Docs | ||
|---|---|---|---|
| ms.custom | |||
| ms.date | 03/14/2017 | ||
| ms.prod | sql-non-specified | ||
| ms.reviewer | |||
| ms.suite | |||
| ms.technology |
|
||
| ms.tgt_pltfrm | |||
| ms.topic | language-reference | ||
| f1_keywords |
|
||
| dev_langs |
|
||
| helpviewer_keywords |
|
||
| ms.assetid | b87bc8ba-3ea8-4aed-b54b-32c3d82d9d2a | ||
| caps.latest.revision | 37 | ||
| author | JennieHubbard | ||
| ms.author | jhubbard | ||
| manager | jhubbard |
[!INCLUDEtsql-appliesto-ss2008-xxxx-xxxx-xxx_md]
Revokes access to a subsystem from a proxy.
Transact-SQL Syntax Conventions
sp_revoke_proxy_from_subsystem
[ @proxy_id = ] proxy_id,
[ @proxy_name = ] 'proxy_name',
[ @subsystem_id = ] subsystem_id,
[ @subsystem_name = ] 'subsystem_name'
[ @proxy_id = ] id
The proxy identification number of the proxy to revoke access from. The proxy_id is int, with a default of NULL. Either proxy_id or proxy_name must be specified, but both cannot be specified.
[ @proxy_name = ] 'proxy_name'
The name of the proxy to revoke access from. The proxy_name is sysname, with a default of NULL. Either proxy_id or proxy_name must be specified, but both cannot be specified.
[ @subsystem_id = ] id
The id number of the subsystem to revoke access to. The subsystem_id is int, with a default of NULL. Either subsystem_id or subsystem_name must be specified, but both cannot be specified. The following table lists the values for each subsystem.
| Value | Description |
|---|---|
| 2 | ActiveX Script ** Important ** The ActiveX Scripting subsystem will be removed from [!INCLUDEssNoVersion] Agent in a future version of [!INCLUDEmsCoName][!INCLUDEssNoVersion]. Avoid using this feature in new development work, and plan to modify applications that currently use this feature. |
| 3 | Operating System (CmdExec) |
| 4 | Replication Snapshot Agent |
| 5 | Replication Log Reader Agent |
| 6 | Replication Distribution Agent |
| 7 | Replication Merge Agent |
| 8 | Replication Queue Reader Agent |
| 9 | Analysis Services Command |
| 10 | Analysis Services Query |
| 11 | [!INCLUDEssIS] package execution |
| 12 | PowerShell Script |
[ @subsystem_name= ] 'subsystem_name'
The name of the subsystem to revoke access to. The subsystem_name is sysname, with a default of NULL. Either subsystem_id or subsystem_name must be specified, but both cannot be specified. The following table lists the values for each subsystem.
| Value | Description |
|---|---|
| ActiveScripting | ActiveX Script |
| CmdExec | Operating System (CmdExec) |
| Snapshot | Replication Snapshot Agent |
| LogReader | Replication Log Reader Agent |
| Distribution | Replication Distribution Agent |
| Merge | Replication Merge Agent |
| QueueReader | Replication Queue Reader Agent |
| ANALYSISQUERY | Analysis Services Command |
| ANALYSISCOMMAND | Analysis Services Query |
| Dts | [!INCLUDEssIS] package execution |
| PowerShell | PowerShell Script |
Revoking access to a subsystem does not change the permissions for the principal specified in the proxy.
Note
To determine which job steps reference a proxy, right-click the Proxies node under SQL Server Agent in Microsoft [!INCLUDEssManStudioFull], and then click Properties. In the Proxy Account Properties dialog box, select the References page to view all job steps that reference this proxy.
Only members of the sysadmin fixed server role can execute sp_revoke_proxy_from_subsystem.
The following example revokes access to the [!INCLUDEssIS] subsystem for the proxy Catalog application proxy.
USE msdb ;
GO
EXEC dbo.sp_revoke_proxy_from_subsystem
@proxy_name = 'Catalog application proxy',
@subsystem_name = N'Dts';
SQL Server Agent Stored Procedures (Transact-SQL)
Implement SQL Server Agent Security
sp_grant_proxy_to_subsystem (Transact-SQL)