Cross DB Ownership Chaining


Job details

Name: Cross DB Ownership Chaining
Platform: Sqlserver
Category: Security
Premium package: Security and compliance package
Description: Checks cross-database ownership chaining across all databases at the instance level.
Long description: Checks cross-database ownership chaining across all databases at the instance level.
Version: 1.2
Default schedule: 7 1 1 *
Requires engine install: Yes
Compatibility tag: .[type=‘instance’ & databasetype=‘sqlserver’]/instance[maj_version > ‘2005′ & hasengine=‘YES’ & eng_inst_priv = 0 & (engine_edition = ‘Microsoft SQL Server’ engine_edition = ‘Azure SQL Managed Instance’)]

Parameters

Name Default value Description
return status 1 Return status value (ALARM – 2, WARNING – 1, or OK – 0) when the “cross db ownership chaining” parameter is enabled.
disable cross db ownership chaining NO If set to “YES“ the alert will disable “cross db ownership chaining” (if it is enabled) by running sp_configure stored procedure.
history threshold 365 The maximum number of days to keep statistics for in the historic tables.

Job Summary

SELECT value_in_use FROM master.sys.configurations WHERE name = 'cross db ownership chaining'

Implementation Details

Overview of Tables and Procedure

Job Dependencies

Presentation and Reporting

Upgrade and Installation

Applicability

In sum, the “Cross DB Ownership Chaining” monitoring job in dbWatch Control Center is vital for maintaining database security by providing oversight over potentially risky database configurations, thereby helping organizations enforce best practices in database security and compliance.