title | description | author | ms.author | ms.reviewer | ms.date | ms.service | ms.subservice | ms.topic | f1_keywords | helpviewer_keywords | dev_langs | ||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
sp_revoke_proxy_from_subsystem (Transact-SQL) |
sp_revoke_proxy_from_subsystem revokes access to a subsystem from a proxy. |
VanMSFT |
vanto |
randolphwest |
08/22/2024 |
sql |
system-objects |
reference |
|
|
|
[!INCLUDE SQL Server]
Revokes access to a subsystem from a proxy.
:::image type="icon" source="../../includes/media/topic-link-icon.svg" border="false"::: Transact-SQL syntax conventions
sp_revoke_proxy_from_subsystem
[ [ @proxy_id = ] proxy_id ]
[ , [ @proxy_name = ] N'proxy_name' ]
[ , [ @subsystem_id = ] subsystem_id ]
[ , [ @subsystem_name = ] N'subsystem_name' ]
[ ; ]
The proxy identification number of the proxy to revoke access from. @proxy_id is int, with a default of NULL
.
Either @proxy_id or @proxy_name must be specified, but both can't be specified.
The name of the proxy to revoke access from. @proxy_name is sysname, with a default of NULL
.
Either @proxy_id or @proxy_name must be specified, but both can't be specified.
The ID number of the subsystem to revoke access to. @subsystem_id is int, with a default of NULL
.
Either @subsystem_id or @subsystem_name must be specified, but both can't be specified.
The following table lists the values for each subsystem.
Value | Description |
---|---|
2 1 |
ActiveX Script |
3 |
Operating System (CmdExec) |
4 |
Replication Snapshot Agent |
5 |
Replication Log Reader Agent |
6 |
Replication Distribution Agent |
7 |
Replication Merge Agent |
8 |
Replication Queue Reader Agent |
9 |
Analysis Services Command |
10 |
Analysis Services Query |
11 |
[!INCLUDE ssIS] package execution |
12 |
PowerShell Script |
1 The ActiveX Scripting subsystem will be removed from [!INCLUDE ssNoVersion] Agent in a future version of [!INCLUDE ssNoVersion]. Avoid using this feature in new development work, and plan to modify applications that currently use this feature.
The name of the subsystem to revoke access to. @subsystem_name is sysname, with a default of NULL
.
Either @subsystem_id or @subsystem_name must be specified, but both can't be specified.
The following table lists the values for each subsystem.
Value | Description |
---|---|
ActiveScripting 1 |
ActiveX Script |
CmdExec |
Operating System (CmdExec) |
Snapshot |
Replication Snapshot Agent |
LogReader |
Replication Log Reader Agent |
Distribution |
Replication Distribution Agent |
Merge |
Replication Merge Agent |
QueueReader |
Replication Queue Reader Agent |
ANALYSISQUERY |
Analysis Services Command |
ANALYSISCOMMAND |
Analysis Services Query |
Dts |
[!INCLUDE ssIS] package execution |
PowerShell |
PowerShell Script |
1 The ActiveX Scripting subsystem will be removed from [!INCLUDE ssNoVersion] Agent in a future version of [!INCLUDE ssNoVersion]. Avoid using this feature in new development work, and plan to modify applications that currently use this feature.
Revoking access to a subsystem doesn't change the permissions for the principal specified in the proxy.
Note
To determine which job steps reference a proxy, right-click the Proxies node under SQL Server Agent in Microsoft [!INCLUDE ssManStudioFull], and then select Properties. In the Proxy Account Properties dialog box, select the References page to view all job steps that reference this proxy.
[!INCLUDE msdb-execute-permissions]
The following example revokes access to the [!INCLUDE ssIS] subsystem for the proxy Catalog application proxy
.
USE msdb;
GO
EXEC dbo.sp_revoke_proxy_from_subsystem
@proxy_name = 'Catalog application proxy',
@subsystem_name = N'Dts';