You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/azure-sql/database/authentication-aad-configure.md
+13-11Lines changed: 13 additions & 11 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -82,37 +82,39 @@ Your SQL Managed Instance needs permissions to read Azure AD to successfully acc
82
82
83
83
To grant your SQL Managed Instance Azure AD read permission using the Azure portal, log in as Global Administrator in Azure AD and follow these steps:
84
84
85
-
1. In the [Azure portal](https://portal.azure.com), in the upper-right corner, select your connection from a drop-down list of possible Active Directories.
85
+
1. In the [Azure portal](https://portal.azure.com), in the upper-right corner select your account, and then choose **Switch directories** to confirm which Active Directory is currently your active directory. Switch directories, if necessary.
86
+
87
+
:::image type="content" source="media/authentication-aad-configure/switch-directory.png" alt-text="Screenshot of the Azure portal showing where to switch your directory":::
86
88
87
89
2. Choose the correct Active Directory as the default Azure AD.
88
90
89
91
This step links the subscription associated with Active Directory to the SQL Managed Instance, making sure that the same subscription is used for both the Azure AD instance and the SQL Managed Instance.
90
92
91
93
3. Navigate to the SQL Managed Instance you want to use for Azure AD integration.
92
94
93
-

95
+
:::image type="content" source="./media/authentication-aad-configure/aad.png" alt-text="Screenshot of the Azure portal showing the Active Directory admin page open for the selected SQL managed instance.":::
94
96
95
97
4. Select the banner on top of the Active Directory admin page and grant permission to the current user.
96
98
97
-

99
+
:::image type="content" source="./media/authentication-aad-configure/grant-permissions.png" alt-text="Screenshot of the dialog for granting permissions to a SQL managed instance for accessing Active Directory. The Grant permissions button is selected.":::
98
100
99
101
5. After the operation succeeds, the following notification will show up in the top-right corner:
100
102
101
-

103
+
:::image type="content" source="./media/authentication-aad-configure/success.png" alt-text="Screenshot of a notification confirming that active directory read permissions have been successfully updated for the managed instance.":::
102
104
103
105
6. Now you can choose your Azure AD admin for your SQL Managed Instance. For that, on the Active Directory admin page, select **Set admin** command.
104
106
105
-

107
+
:::image type="content" source="./media/authentication-aad-configure/set-admin.png" alt-text="Screenshot showing the Set admin command highlighted on the Active Directory admin page for the selected SQL managed instance.":::
106
108
107
109
7. On the Azure AD admin page, search for a user, select the user or group to be an administrator, and then select **Select**.
108
110
109
111
The Active Directory admin page shows all members and groups of your Active Directory. Users or groups that are grayed out can't be selected because they aren't supported as Azure AD administrators. See the list of supported admins in [Azure AD Features and Limitations](authentication-aad-overview.md#azure-ad-features-and-limitations). Azure role-based access control (Azure RBAC) applies only to the Azure portal and isn't propagated to SQL Database, SQL Managed Instance, or Azure Synapse.
110
112
111
-

113
+
:::image type="content" source="./media/authentication-aad-configure/add-azure-active-directory-admin.png" alt-text="Add Azure Active Directory admin":::
112
114
113
115
8. At the top of the Active Directory admin page, select **Save**.
114
116
115
-

117
+
:::image type="content" source="./media/authentication-aad-configure/save.png" alt-text="Screenshot of the Active Directory admin page with the Save button in the top row next to the Set admin and Remove admin buttons.":::
116
118
117
119
The process of changing the administrator may take several minutes. Then the new administrator appears in the Active Directory admin box.
118
120
@@ -243,7 +245,7 @@ The following two procedures show you how to provision an Azure Active Directory
243
245
244
246
2. Search for and select **SQL server**.
245
247
246
-

248
+
:::image type="content" source="./media/authentication-aad-configure/search-for-and-select-sql-servers.png" alt-text="Search for and select SQL servers":::
247
249
248
250
>[!NOTE]
249
251
> On this page, before you select **SQL servers**, you can select the **star** next to the name to *favorite* the category and add **SQL servers** to the left navigation bar.
@@ -252,15 +254,15 @@ The following two procedures show you how to provision an Azure Active Directory
252
254
253
255
4. In the **Active Directory admin** page, select **Set admin**.
254
256
255
-

257
+
:::image type="content" source="./media/authentication-aad-configure/sql-servers-set-active-directory-admin.png" alt-text="SQL servers set Active Directory admin":::
256
258
257
259
5. In the **Add admin** page, search for a user, select the user or group to be an administrator, and then select **Select**. (The Active Directory admin page shows all members and groups of your Active Directory. Users or groups that are grayed out cannot be selected because they are not supported as Azure AD administrators. (See the list of supported admins in the **Azure AD Features and Limitations** section of [Use Azure Active Directory Authentication for authentication with SQL Database or Azure Synapse](authentication-aad-overview.md).) Azure role-based access control (Azure RBAC) applies only to the portal and is not propagated to SQL Server.
258
260
259
-

261
+
:::image type="content" source="./media/authentication-aad-configure/select-azure-active-directory-admin.png" alt-text="Select Azure Active Directory admin":::
260
262
261
263
6. At the top of the **Active Directory admin** page, select **Save**.
Copy file name to clipboardExpand all lines: articles/azure-sql/includes/sql-database-create-single-database.md
+9-9Lines changed: 9 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -20,25 +20,25 @@ To create a resource group, server, and single database in the Azure portal:
20
20
1. From the Search bar, search for and select **Azure SQL**.
21
21
1. On the **Azure SQL** page, select **Add**.
22
22
23
-

23
+
:::image type="content" source="./media/sql-database-create-single-database/sqldbportal.png" alt-text="Add to Azure SQL":::
24
24
25
25
1. On the **Select SQL deployment option** page, select the **SQL databases** tile, with **Single database** under **Resource type**. You can view more information about the different databases by selecting **Show details**.
26
26
1. Select **Create**.
27
27
28
-

28
+
:::image type="content" source="./media/sql-database-create-single-database/create-single-database.png" alt-text="Create single database":::
29
29
30
30
1. On the **Basics** tab of the **Create SQL database** form, under **Project details**, select the correct Azure **Subscription** if it isn't already selected.
31
31
1. Under **Resource group**, select **Create new**, enter *myResourceGroup*, and select **OK**.
32
32
1. Under **Database details**, for **Database name** enter *mySampleDatabase*.
33
33
1. For **Server**, select **Create new**, and fill out the **New server** form as follows:
34
34
-**Server name**: Enter *mysqlserver*, and some characters for uniqueness.
35
-
-**Server admin login**: Enter *azureuser*.
35
+
-**Server admin login**: Enter *AzureAdmin*.
36
36
-**Password**: Enter a password that meets requirements, and enter it again in the **Confirm password** field.
37
-
-**Location**: Drop down and choose a location, such as **(US) East US**.
37
+
-**Location**: Drop down and choose a location, such as **(US) West US**.
Record the server admin login and password so you can log in to the server and its databases. If you forget your login or password, you can get the login name or reset the password on the **SQL server** page after database creation. To open the **SQL server** page, select the server name on the database **Overview** page.
44
44
@@ -53,13 +53,13 @@ To create a resource group, server, and single database in the Azure portal:
53
53
54
54
1. Select **Next: Networking** at the bottom of the page.
For more information about firewall settings, see [Allow Azure services and resources to access this server](../database/network-access-controls-overview.md) and [Add a private endpoint](../database/private-endpoint-overview.md).
65
65
@@ -68,7 +68,7 @@ To create a resource group, server, and single database in the Azure portal:
68
68
1. Optionally, set the [maintenance window](../database/maintenance-window.md) so planned maintenance is performed at the best time for your database.
69
69
1. Select **Review + create** at the bottom of the page.
The first time you use Cloud Shell from the portal, select **PowerShell** on the **Welcome** dialog. Subsequent sessions will use PowerShell, or you can select it from the Cloud Shell control bar.
0 commit comments