Skip to content

manage-logins-in-the-publication-access-list.md

Latest commit

 

History

History
72 lines (49 loc) · 4.25 KB

manage-logins-in-the-publication-access-list.md

File metadata and controls

72 lines (49 loc) · 4.25 KB
title Manage Logins in the Publication Access List
description Manage Logins in the Publication Access List
author MashaMSFT
ms.author mathoma
ms.date 09/25/2024
ms.service sql
ms.subservice replication
ms.topic how-to
ms.custom
updatefrequency5
helpviewer_keywords
logins [SQL Server replication], publication access list
publications [SQL Server replication], publication access lists
publication access list (PAL)
PAL (publication access list)
logins [SQL Server replication], managing
monikerRange =azuresqldb-mi-current||>=sql-server-2016

Manage Logins in the Publication Access List

[!INCLUDEsql-asdbmi] This topic describes how to manage logins in the Publication Access List in [!INCLUDEssnoversion] by using [!INCLUDEssManStudioFull] or [!INCLUDEtsql]. Access to a publication is controlled by the publication access list (PAL). Logins and groups can be added and removed from the PAL.

In This Topic

Before You Begin

Prerequisites

  • You must associate the [!INCLUDEssNoVersion] login with a database user in the publication database before you add the login to the PAL.

Using SQL Server Management Studio

You use the publication access list (PAL) on the Publication Access List page of the Publication Properties - <Publication> dialog box to manage logins. For more information about how to access this dialog box, see View and Modify Publication Properties.

To manage logins in the PAL

  1. On the Publication Access List page of the Publication Properties - <Publication> dialog box, use the Add, Remove, and Remove All buttons to add and remove logins and groups from the PAL. Do not remove distributor_admin from the PAL. This account is used by replication.

    [!NOTE]
    If a remote Distributor is used, accounts in the PAL must be available at both the Publisher and the Distributor. The account must be either a domain account or a local account that is defined at both servers. The passwords that are associated with both logins must be the same.

  2. Select OK.

Using Transact-SQL

To view groups and logins that belong to the PAL

  1. At the Publisher on the publication database, execute sp_help_publication_access. For @publication, specify the publication name. This displays information about the groups and logins in the PAL.

To add groups and logins to the PAL

  1. At the Publisher on the publication database, execute sp_grant_publication_access. For @publication, specify the publication name; and for @login, specify the name of the login or group that is being added.

To remove groups and logins from the PAL

  1. At the Publisher on the publication database, execute sp_revoke_publication_access. For @publication, specify the publication name; and for @login, specify the name of the login or group that is being removed.

Related content