Allow DPA to connect to SQL using a Managed Service Account

we need to use GMSA for the DB servers monitoring as per our new security policy.
I see it was requested more than 2 years ago and yet...

Hello,

I was going to request the same thing and saw this has already been asked. Please review the Microsoft documentation relating to Group Managed Service Accounts (gMSA).

https://docs.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/group-managed-service-accounts-overview

To summarize why this is important, currently DPA requires either a SQL Login or an AD service account to connect to SQL Server. In both cases, the password must be set by an administrator and entered into password field when setting up the data connection. This password is saved in the DPA database. Combined with the fact the login requires sysadmin to be able to collect database performance data, this is a security risk.

Group Managed Service Accounts alleviate this, because the password for such an account is managed by Active Directory and never known to anyone.

Please let us know when you can implement this.

Kind regards,

Daniel

Do you mean a Network Service Account?