In our environment, SQL authentication is the norm, but Windows auth is possible when users are using RDP. As a result, each physical user has two logical logins for each instance and two logical users for each database on each instance.
Is there any way to link two logins, so I can (e.g.) grant privs to both simultaneously?
This is a small thing, but seeing repetition like this triggers my "there's got to be a better way" sense:
CREATE LOGIN Bob CREATE LOGIN Domain\Bob ALTER SERVER ROLE serveradmin ADD MEMBER Bob ALTER SERVER ROLE serveradmin ADD MEMBER Domain\Bob USE Db; CREATE USER Bob FOR LOGIN Bob USE Db; CREATE USER Domain\Bob FOR LOGIN Domain\Bob
Am I overlooking a feature that would reduce this duplication?
We'll eventually replace domain logins with AD groups, which will help.