Adds a management database account to the list of accounts allowed to access this audit store database.
Syntax
void AddAuditServerAccount(
string userName,
bool isWindowsAccount
)
Parameters
Specify the following parameters when using this method.
| Parameter | Description |
|
username |
The user name of the management database account you want to add. If the account is a Windows system account, use the Windows domain account name for this parameter. |
|
bool |
Set to true if the account you’re adding is a Windows system or domain account; otherwise, false. |
Errors
The AddAuditServerAccount method may throw one of the following exceptions:
Centrify.DirectAudit.Common.Logic.AuthenticationExceptionif you do not have permission to connect to the Microsoft SQL Server instance or the management database.Centrify.DirectAudit.Common.Logic.ConnectDatabaseExceptionif you cannot connect to the Microsoft SQL Server instance either because the Microsoft SQL Server instance is not running and does not allow remote connections.Centrify.DirectAudit.Common.Logic.UnauthorizedExceptionif you do not have the Manage SQL Login permission on the audit store.
Discussion
When you attach a new database to the audit store, you must set the database to allow access by the management database account. If the management database account is a Windows system account, you must explicitly specify the Windows domain account name in the username parameter. For other Windows accounts and for SQL accounts, you can pass the management database’s Account.UserName property to this method as the user name.
Example
The following code sample first checks each account to see if it’s a Windows system account. If the installation does not use a system account, the code passes the Account.UserName property to the AddAuditServerAccount method as the user name. If the installation uses a system account, it passes the Windows domain account name instead.
...
' Grant permission to management database to access the audit store database
SET objAuditServers = objInstallation.AuditServers
FOR EACH objAuditServer IN objAuditServers
SET objAuditServerAccount = objAuditServer.OutgoingAccount
IF NOT objAuditServerAccount.IsSystemAccount THEN
objAuditStoreDatabase.AddAuditServerAccount & _
objAuditServerAccount.UserName, & _
objAuditServerAccount.IsWindowsAccount
wscript.echo "Added management database account '" & objAuditServerAccount.UserName & "'."
ELSE
'Add management database accounts for those management databases running in
' system account; e.g. NT Authority/Network Service
'
DIM strAuditServerAccount
DIM isAuditServerWindowsAccount
isAuditServerWindowsAccount = true
strAuditServerAccount = "DOMAIN\MACHINE$"
objAuditStoreDatabase.AddAuditServerAccount strAuditServerAccount, & _
isAuditServerWindowsAccount
wscript.echo "Added management database account '" & strAuditServerAccount & "'."
END IF
NEXT
Doc Feedback