Microsoft SQL Server Application Role

The Microsoft SQL Server Application Role allows for using privileges specific to the connecting application when Windows authentication is used to connect to the SQL server.

Configuring Microsoft SQL Server

To use Microsoft SQL Server Application Role with NLS, an application role must first be created on the SQL Server. The process of creating an application role differs with the version of SQL Server being used. Please refer to the documentation for your version of SQL Server to create an application role.

In addition, users must have the following two privileges granted before application role can be called:

  1. The user must be given access to the database.
    GRANT CONNECT TO [domain\login]
  2. The user must be able to read from the system_defaults table.
    GRANT SELECT ON system_defaults TO [domain\login]

Configuring NLS

Go to Setup > System > System Defaults.

Click on the current value column of the SQL Application Role Name row and enter the name of the application role created in SQL Server.

Click in the current value column of the SQL Application Role Password row and enter the password for the application role.

Click OK and restart NLS to save the changes.