Skip to content

Commit d1b50ff

Browse files
Merge pull request #36004 from shohamMSFT/docs-editor/create-a-login-1764885538
Doc update (part 2) on implicit login creation for Windows groups
2 parents 543d497 + ecec33d commit d1b50ff

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

docs/relational-databases/security/authentication-access/create-a-login.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -299,8 +299,10 @@ The login can connect to [!INCLUDE [ssNoVersion](../../../includes/ssnoversion-m
299299

300300
> [!NOTE]
301301
> When you connect to SQL Server through a Windows or Active Directory (AD) group, certain operations can create an implicit login for your group membership without executing a CREATE LOGIN statement. This implicit login creation maintains referential integrity of system metadata within SQL Server. The implicit login doesn't have explicit connect permission to the database, so if you're removed from the group, that login can't connect by itself.
302-
>
303-
> You might observe implicit logins created automatically when you perform certain operations as a member of a Windows group, such as executing `sp_defaultdb` or `sp_defaultlanguage`.
302+
>
303+
> Implicit logins are created automatically when you perform certain operations as a member of a Windows group, such as executing `sp_defaultdb` or `sp_defaultlanguage`.
304+
>
305+
> A user who's a member of the group can also manually create their own login in the database by executing a CREATE LOGIN statement.
304306
>
305307
> This behavior is by design and isn't planned to change. If you need additional monitoring, you can implement triggers to detect login creation attempts.
306308

0 commit comments

Comments
 (0)