Tom Collins has some guidance for us:
-The Hashicorp database secrets engine (database secrets engine) supports a plugin for SQL Server
-It supports root credential rotation, dynamic roles , static roles , username customization
-Vault needs to be configured a user that at minimum :
Click through for those configuration notes.