Is it possible to have DS jobs run as a specific NT user rather than the DS service account.
In a world where security and auditing is getting more and more attention, “anonymous” logins like service accounts are difficult to track and make sure that we know who is accessing what data. In SQL, for example, a job can be setup to “Run As” a particular user. This would be a very nice option in DS. Any thoughts?
I don’t believe it’s possible today, but IMO it’s an interesting idea. Can you enter a SAP message to request it as an enhancement?
The challenge may be:
The general al_jobservice and al_jobserver processes would have to run as the generic service account, because they’re running all the time.
But when it’s time to execute a job, the first al_engine that is spawned (containing the job definition), and all children from it, would have to run as a specific Windows user. If you had a place to specify the Windows username and password at job schedule-time or exection-time, then maybe this would work…