You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/data-factory/enable-aad-authentication-azure-ssis-ir.md
+23-21Lines changed: 23 additions & 21 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -16,7 +16,7 @@ ms.author: douglasl
16
16
---
17
17
# Enable Azure Active Directory Authentication for the Azure-SSIS Integration Runtime
18
18
19
-
This article shows you how to create an Azure-SSIS IR with Azure data factory service identity. Azure Active Directory Authentication with the MSI for the Azure-SSIS integration runtime lets you use ADF MSI instead of SQL authentication to create an Azure-SSIS integration runtime.
19
+
This article shows you how to create an Azure-SSIS IR with Azure data factory service identity. Azure Active Directory Authentication with the Managed Service Identity (MSI) for the Azure-SSIS integration runtime lets you use the ADF MSI instead of SQL authentication to create an Azure-SSIS integration runtime.
20
20
21
21
For more info about the ADF MSI, see [Azure Data Factory service identity](https://docs.microsoft.com/en-us/azure/data-factory/data-factory-service-identity).
22
22
@@ -32,7 +32,10 @@ You can use an existing Azure AD group, or create a new one using Azure AD Power
32
32
2. Sign in using `Connect-AzureAD`, and run the following command to create the group, and save it in a variable:
The output looks like the following example, which also examines the value of the variable:
@@ -59,7 +62,7 @@ You can use an existing Azure AD group, or create a new one using Azure AD Power
59
62
60
63
## Enable Azure AD on Azure SQL Database
61
64
62
-
Azure SQL Database supports creating a database with an Azure AD user. So, you can set an Azure AD user as the Active Directory admin, and then log in to SSMS using the Azure AD user. Then you can create a contained user for the Azure AD group to enable the IR to create the SSIS catalog in the server.
65
+
Azure SQL Database supports creating a database with an Azure AD user. As a result, you can set an Azure AD user as the Active Directory admin, and then log in to SSMS using the Azure AD user. Then you can create a contained user for the Azure AD group to enable the IR to create the SSIS catalog on the server.
63
66
64
67
### Enable Azure AD authentication for the Azure SQL Database
65
68
@@ -68,15 +71,15 @@ using the following steps:
68
71
69
72
1. In the Azure portal, select **All services** -> **SQL servers** from the left-hand navigation.
70
73
71
-
2. Click the SQL server to be enabled for Azure AD authentication.
74
+
2. Select the SQL Database to be enabled for Azure AD authentication.
72
75
73
-
3. In the **Settings** section of the blade, click **Active Directory admin**.
76
+
3. In the **Settings** section of the blade, select **Active Directory admin**.
74
77
75
-
4. In the command bar, click **Set admin**.
78
+
4. In the command bar, select **Set admin**.
76
79
77
-
5. Select an Azure AD user account to be made an administrator of the server, and click **Select.**
80
+
5. Select an Azure AD user account to be made an administrator of the server, and then select **Select.**
78
81
79
-
6. In the command bar, click **Save.**
82
+
6. In the command bar, select **Save.**
80
83
81
84
### Create a contained user in the database that represents the Azure AD group
82
85
@@ -89,23 +92,23 @@ For this next step, you need [Microsoft SQL Server Management Studio](https://d
89
92
90
93
3. In the **Authentication** field, select **Active Directory - Universal with MFA support**. (You can also use other two Active Directory authentications. See [Configure and manage Azure Active Directory authentication with SQL Database, Managed Instance](https://docs.microsoft.com/en-us/azure/sql-database/sql-database-aad-authentication-configure).)
91
94
92
-
4. In the **User name** field, enter the name of the Azure AD account that you set as the server administrator, for example, [email protected].
95
+
4. In the **User name** field, enter the name of the Azure AD account that you set as the server administrator - for example, [email protected].
93
96
94
-
5. Click **Connect**. Complete the sign-in process.
97
+
5. select **Connect**. Complete the sign-in process.
95
98
96
99
6. In the **Object Explorer**, expand the **Databases** -> System Databases folder.
97
100
98
-
7. Right-click on **master** database and click **New query**.
101
+
7. Right-Select on **master** database and select **New query**.
99
102
100
-
8. In the query window, enter the following line, and click **Execute** in the toolbar:
103
+
8. In the query window, enter the following line, and select **Execute** in the toolbar:
101
104
102
105
```sql
103
106
CREATE USER [SSISIrGroup] FROM EXTERNAL PROVIDER
104
107
```
105
108
106
-
The command should complete successfully, creating the contained user for the group.
109
+
The command should complete successfully, creating the contained user for the group.
107
110
108
-
9. Clear the query window, enter the following line, and click **Execute** in the toolbar:
111
+
9. Clear the query window, enter the following line, and Select **Execute** in the toolbar:
109
112
110
113
```sql
111
114
ALTER ROLE dbmanager ADD MEMBER [SSISIrGroup]
@@ -115,22 +118,21 @@ The command should complete successfully, creating the contained user for the gr
115
118
116
119
## Enable Azure AD on Azure SQL Database Managed Instance
117
120
118
-
Azure SQL Database Managed Instance doesn't support creating database with any AAD user other than AD admin. As a result, you have to set the Azure AD Group as
119
-
the Active Directory admin. You don't need to create the contained user.
121
+
Azure SQL Database Managed Instance doesn't support creating a database with any AAD user other than AD admin. As a result, you have to set the Azure AD Group as the Active Directory admin. You don't need to create the contained user.
120
122
121
123
You can [configure Azure AD authentication for the SQL Database Managed Instance server](https://docs.microsoft.com/en-us/azure/sql-database/sql-database-aad-authentication-configure) using the following steps:
122
124
123
125
7. In the Azure portal, select **All services** -> **SQL servers** from the left-hand navigation.
124
126
125
-
8. Click the SQL server to be enabled for Azure AD authentication.
127
+
8. Select the SQL server to be enabled for Azure AD authentication.
126
128
127
-
9. In the **Settings** section of the blade, click **Active Directory admin**.
129
+
9. In the **Settings** section of the blade, select **Active Directory admin**.
128
130
129
-
10. In the command bar, click **Set admin**.
131
+
10. In the command bar, select **Set admin**.
130
132
131
-
11. Search and select the Azure AD Group (for example, SSISIrGroup), and click **Select.**
133
+
11. Search and select the Azure AD Group (for example, SSISIrGroup), and select **Select.**
0 commit comments