Skip to content

credentials-database-engine.md

Latest commit

 

History

History
47 lines (38 loc) · 3.58 KB

credentials-database-engine.md

File metadata and controls

47 lines (38 loc) · 3.58 KB
title Credentials (Database Engine) | Microsoft Docs
description Learn about credentials in SQL Server. Get acquainted with the authentication information required to connect to a resource outside SQL Server.
ms.custom
ms.date 06/27/2019
ms.prod sql
ms.prod_service database-engine, sql-database, sql-data-warehouse, pdw
ms.reviewer
ms.technology security
ms.topic conceptual
helpviewer_keywords
principals [SQL Server], credentials
schemas [SQL Server], credentials
permissions [SQL Server], credentials
groups [SQL Server], credentials
ALTER ANY CREDENTIAL permission
security [SQL Server], credentials
authentication [SQL Server], credentials
users [SQL Server], credentials
credentials [SQL Server], about credentials
credentials [SQL Server]
ms.assetid c8df6022-e0b4-46b8-9670-3f86938d3177
author VanMSFT
ms.author vanto
monikerRange >=aps-pdw-2016||=azuresqldb-current||=azure-sqldw-latest||>=sql-server-2016||=sqlallproducts-allversions||>=sql-server-linux-2017||=azuresqldb-mi-current

Credentials (Database Engine)

[!INCLUDE SQL Server]

A credential is a record that contains the authentication information (credentials) required to connect to a resource outside [!INCLUDEssNoVersion]. This information is used internally by [!INCLUDEssNoVersion]. Most credentials contain a Windows user name and password.

The information stored in a credential enables a user who has connected to [!INCLUDEssNoVersion] by way of [!INCLUDEssNoVersion] Authentication to access resources outside the server instance. When the external resource is Windows, the user is authenticated as the Windows user specified in the credential. A single credential can only be mapped to a single [!INCLUDEssNoVersion] login. And a [!INCLUDEssNoVersion] login can be mapped to only one credential.

For credentials that are stored in the master database and can be used throughout the instance of [!INCLUDEssNoVersion], see CREATE CREDENTIAL (Transact-SQL). For credentials used by a specific database, and portable with that database, see CREATE DATABASE SCOPED CREDENTIAL (Transact-SQL).

System credentials are created automatically and are associated with specific endpoints. Names for system credentials start with two hash signs (##).

For more information about credentials, see the sys.credentials and sys.database_scoped_credentials catalog views.

Related Content

Create a Credential
CREATE CREDENTIAL (Transact-SQL)
CREATE DATABASE SCOPED CREDENTIAL (Transact-SQL)
Securing SQL Server