Azure Arc-Enabled SQL Server

This repository contains scripts and utilities for managing SQL Server instances enabled by Azure Arc.

Last updated: 2025-08-27

Overview

SQL Server enabled by Azure Arc extends Azure management and governance capabilities to SQL Server instances hosted outside of Azure—including on-premises, edge, or other cloud environments. With Azure Arc, you can:

• Manage your SQL Server instances at scale from a single point of control in Azure
• Automatically connect SQL Server instances discovered on Arc-enabled servers in supported regions (auto-connect), with an optional least-privilege mode rollout
• Monitor performance and inventory across connected SQL Server instances (monitoring features are under active development; see docs for current preview scope)
• Assess migration readiness and receive recommendations for Azure SQL targets
• Enable advanced features such as Microsoft Defender for Cloud and Microsoft Purview integration
• Access Extended Security Updates (ESUs) for end-of-support SQL Server versions

Repository Contents

This repository contains scripts for various Azure Arc-enabled SQL Server management tasks:

Arc SQL Server Resource Management

• arc-sql-namespace-migration/migrate-to-azure-arc-data.ps1: Migrate SQL Server - Azure Arc resources from legacy Microsoft.AzureData namespace to current Microsoft.AzureArcData namespace.

Licensing Management

• arc-sql-activate-pcore-license: Scripts and guidance for activating P-Core licensing for SQL Server in Azure Arc.
• arc-sql-install-payg-sql-server: Install SQL Server with Pay-As-You-Go licensing via Azure Arc.
• arc-sql-modify-license-type: Modify license type for existing SQL Server instances in Azure Arc.

Monitoring and Management

• arc-sql-monitoring: Configure monitoring features for Azure Arc-enabled SQL Server.
• arc-sql-data-collection: Documentation on the data collection process and categories for SQL Server enabled by Azure Arc, including usage metrics, monitoring data, and privacy considerations.
• arc-sql-report-reclass-extension-status: Report on SQL Azure Arc reclassification status.
• arc-sql-uninstall-azure-extension-for-sql-server: Uninstall Azure extension for SQL Server.
• arc-sql-connectivity: Documentation and tools for checking network connectivity for Azure Connected Machine Agent, essential for Azure Arc-enabled SQL Server functionality.
• arc-sql-best-practice-assessment: Enable and manage SQL Best Practices Assessment; includes an at-scale Azure Policy guide.

Onboarding Automation

• arc-server-onboarding-automation: Scripts and documentation for automating the onboarding of servers to Azure Arc.

Learning Resources

• arc-sql-videos: Collection of instructional videos about Azure Arc-enabled SQL Server, including overview, monitoring features, and migration assessment demonstrations.
• arc-sql-presentation-files: Presentation materials related to Azure Arc-enabled SQL Server, suitable for technical briefings, customer presentations, and education.

Prerequisites

• Azure subscription
• Windows or Linux machine with SQL Server installed
• PowerShell 7.0 or higher
• Azure PowerShell module installed
• Appropriate Azure RBAC permissions
• Network connectivity to Azure (outbound HTTPS on TCP port 443)
• Registered resource providers: Microsoft.AzureArcData and Microsoft.HybridCompute

Important Notes

• The Arc-enabled SQL Server resource uses the same region and resource group as the Arc-enabled server resource on which the instance is discovered.
• Auto-connect: In supported regions, SQL instances on Arc-enabled servers are automatically connected and discovered. For environments requiring manual control (or regions without auto-connect), you can connect instances explicitly.
• A tag ArcSQLServerExtensionDeployment = Disabled on the Arc-enabled server resource prevents automatic SQL extension deployment.
• Best Practices Assessment supports license types Paid or PAYG (not LicenseOnly) and currently runs on Windows hosts.
• Review the architecture and prerequisites before deployment.

Getting Started

1. Clone this repository:

   git clone https://github.com/microsoft/azure-arc-enabled-sql-server.git
   cd azure-arc-enabled-sql-server
   

2. Navigate to the script directory for your desired task.

3. Follow the instructions in the script or README for that specific task.

Learn More

• SQL Server enabled by Azure Arc - Overview
• Connect your SQL Server to Azure Arc
• Manage automatic connection (auto-connect)
• Best practices assessment
• Monitoring (preview)
• Azure Arc documentation

Security Best Practices

• Always follow the principle of least privilege when assigning permissions
• Use Managed Identity for authentication when possible
• Keep Azure Arc agents updated to the latest versions
• Regularly review security recommendations in Microsoft Defender for Cloud
• Implement network security controls to protect SQL Server instances

Contributing

This project welcomes contributions and suggestions. Please follow the standard GitHub pull request process.

---

© Microsoft Corporation. Licensed under the Apache License, Version 2.0.