Adding to @balajij8’s answer: the reason a contained user can’t work is that ##MS_DatabaseConnector## is a server-level role, and server roles take logins from master, not database users. That’s the access the connector needs to reach master.To keep ...
I agree with most of your concerns. The risks you list are real. But in my experience the choice isn’t “central team builds everything” vs “everyone builds anything.” What’s worked for us is a paved road:The platform team owns the hard parts. Ingesti...
Hi @Charansai — we use a similar pattern for audit access in a regulated (GxP) environment, so taking your questions in order:1. Why the 5 users are already members. Eligible PIM members aren’t actual group members until they activate, and SCIM provi...
Hi @volodymyr_b — I think your theory is right, and your own log line backs it up.SQL Server doesn’t sort uniqueidentifier the way the string sorts. It compares the last 6-byte group first (the FFE14F608876 part), then works backward through the othe...
