Grant each identity or process only the permissions required for its intended operations. Excess access increases the damage a compromised account can cause, even when broader permissions are easier to configure. section 4.1.2
Apply the principle to unattended automations by:
- Creating a dedicated service account instead of reusing an administrator account. section 4.1.2
- Granting only the operation-specific permission: a SQL health check needs view server state rather than database administrator or database read access. section 4.1.2
- Restricting where an identity can operate through IP- or host-based controls. section 4.1.2
- Combining minimum permissions with role-based access, protected credential storage, audit logs, and alerts for anomalous activity. section 4.5 section 4.6
SQL health check
A SQL health check account should receive view server state permission only. If compromised, it can inspect the required server information without reading database data, creating backdoors, or creating additional accounts. section 4.1.2
