Skip to content

Commit ee2d437

Browse files
authored
Update how-to-data-owner-policies-azure-sql-db.md
1 parent 74b5368 commit ee2d437

File tree

1 file changed

+7
-8
lines changed

1 file changed

+7
-8
lines changed

articles/purview/how-to-data-owner-policies-azure-sql-db.md

Lines changed: 7 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ ms.author: vlrodrig
66
ms.service: purview
77
ms.subservice: purview-data-policies
88
ms.topic: how-to
9-
ms.date: 07/20/2022
9+
ms.date: 08/11/2022
1010
ms.custom: references_regions, event-tier1-build-2022
1111
---
1212
# Provision access by data owner for Azure SQL DB (preview)
@@ -39,19 +39,18 @@ This how-to guide describes how a data owner can delegate authoring policies in
3939
[!INCLUDE [Access policies generic configuration](./includes/access-policies-configuration-generic.md)]
4040

4141
### Azure SQL Database configuration
42-
Each Azure SQL Database server needs a Managed Identity assigned to it.
43-
You can use the following PowerShell script:
42+
Each Azure SQL Database server needs a Managed Identity assigned to it. You can do this from Azure Portal by navigating to the Azure SQL Server that hosts the Azure SQL DB, navigating to Identity on the side menu, checking status to *On* and then saving. See screenshot:
43+
![Screenshot shows how to assign system managed identity to Azure SQL Server.](./media/how-to-data-owner-policies-sql//assign-identity-azure-sql-db.png)
44+
45+
46+
You will also need to enable external policy based authorization on the server. You can do this in Power Shell
47+
4448
```powershell
4549
Connect-AzAccount
4650
4751
$context = Get-AzSubscription -SubscriptionId xxxx-xxxx-xxxx-xxxx
4852
Set-AzContext $context
4953
50-
Set-AzSqlServer -ResourceGroupName "RESOURCEGROUPNAME" -ServerName "SERVERNAME" -AssignIdentity
51-
```
52-
You will also need to enable external policy based authorization on the server.
53-
54-
```powershell
5554
$server = Get-AzSqlServer -ResourceGroupName "RESOURCEGROUPNAME" -ServerName "SERVERNAME"
5655
5756
#Initiate the call to the REST API to set externalPolicyBasedAuthorization to true

0 commit comments

Comments
 (0)