Skip to content

Commit 775d70c

Browse files
Update auditing-managed-identity.md (#34540)
1 parent f1fd77f commit 775d70c

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

azure-sql/database/auditing-managed-identity.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -105,6 +105,9 @@ For more information, see [Server Auditing Settings - Create Or Update](/rest/ap
105105

106106
---
107107

108+
> [!NOTE]
109+
> When auditing is configured using a managed identity, copying the database to a new server or creating a geo-replica may break audit logging. This is because the new server has a different managed identity, which might not have access to the audit storage account. Ensure the new server's identity is granted appropriate permissions to maintain audit continuity.
110+
108111
## Configure system-assigned managed identity for Azure Synapse Analytics auditing
109112

110113
You can't use UMI based authentication to a storage account for auditing. Only system-assigned managed identity (SMI) can be used for Azure Synapse Analytics. For SMI authentication to work, the managed identity must have the **Storage Blob Data Contributor** role assigned to it, in the storage account's **Access Control** settings. This role is automatically added if Azure portal is used to configure auditing.

0 commit comments

Comments
 (0)