Skip to content

Commit c46ebbc

Browse files
authored
Merge pull request #96261 from AndreasWolter/patch-1
additional restrictions on Server Admins
2 parents 4bc6712 + 32c8a4c commit c46ebbc

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

articles/sql-database/sql-database-manage-logins.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -48,6 +48,9 @@ The **Server admin** and **Azure AD admin** accounts have the following characte
4848
- Can create, alter, and drop databases, logins, users in master, and server-level IP firewall rules.
4949
- Can add and remove members to the `dbmanager` and `loginmanager` roles.
5050
- Can view the `sys.sql_logins` system table.
51+
- Cannot be renamed.
52+
- To change the Azure AD admin account, use the Portal or Azure CLI.
53+
- The Server Admin account cannot be changed afterwards.
5154

5255
### Configuring the firewall
5356

0 commit comments

Comments
 (0)