Contained database credentials

Name:	Contained database credentials
Platform:	Sqlserver
Category:	Security
Premium package:	Security and compliance package
Description:	Checks if the database users in contained databases are using database authentication (authentication_type = 2).
Long description:	Checks if the database users in contained databases are using database authentication (authentication_type = 2).
Version:	1.2
Default schedule:	6 1 1 *
Requires engine install:	Yes
Compatibility tag:	[CDATA[.[type=‘instance’ & databasetype=‘sqlserver’]/instance[maj_version > ‘2008’ & hasengine=‘YES’ & eng_inst_priv = 0 & (engine_edition = ‘Microsoft SQL Server’ \| engine_edition = ‘Azure SQL Managed Instance’)

Parameters
Name	Default value	Description
return status	1	Return status value (ALARM – 2, WARNING – 1, or OK – 0) when database users with database authentication are present.
revoke CONNECT	NO	If set to “YES” the alert will revoke “CONNECT” permission for users using database authentication by running “REVOKE CONNECT FROM
history threshold	365	The maximum number of days to keep statistics for in the historic tables.

Feedback