MS SQL: enabling server proxy account
this points to step #15, page 33, in the Connector 5.2.7 MicrosoftSQLMultServerAuditConfig.pdf:
15 Click the Security tab. In the Server proxy account section, select Enable server proxy
account. Set the Proxy account and Password fields to the domain user arcsight and its
password. Click OK.
(from MSDN: Server Properties (Security Page) )
Enable server proxy account
Enables an account for use by xp_cmdshell. Proxy accounts allow for the impersonation of logins, server roles, and database roles when an operating system command is being executed.
The login used by the server proxy account should have the least privileges required to perform the intended work. Excessive privileges for the proxy account could be used by a malicious user to compromise your system security.
my question is, why is this required for the MS SQL Multi Server Audit DB, what are the commands that are required to be run via the xp_cmdshell that requires this permission?