You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
> This feature applies to SQL Server 2022 and later on Azure Virtual Machines and Arc enabled SQL Server.
19
22
20
23
[Guest users](/entra/external-id/user-properties) with Microsoft Entra B2B collaboration are users that have accounts in an external Microsoft Entra organization or an external identity provider (for example, Outlook, Windows Live Mail, or Gmail), which isn't managed within your Microsoft Entra tenant. Guest user accounts are created when those individuals are invited to collaborate within your tenant, while still performing authentication against their identity provider.
21
24
@@ -35,7 +38,7 @@ Azure SQL Database, SQL Managed Instance, and Azure Synapse Analytics support cr
35
38
36
39
Follow these steps to create a database user using a Microsoft Entra guest user. In this section, replace `<guest_user>` with a valid email address, for example `guest_user@example.com`.
37
40
38
-
### Create guest user in SQL Database and Azure Synapse
41
+
### [SQL Database and Azure Synapse](#tab/sql-database)
39
42
40
43
1. Ensure that the guest user is already added into your Microsoft Entra ID and a Microsoft Entra admin has been set for the database server. Having a Microsoft Entra admin is required for Microsoft Entra authentication.
41
44
@@ -55,10 +58,10 @@ Follow these steps to create a database user using a Microsoft Entra guest user.
55
58
56
59
1. Disconnect and sign into the database as the guest user using [SQL Server Management Studio (SSMS)](/ssms/sql-server-management-studio-ssms) using the authentication method **Azure Active Directory - Universal with MFA**. For more information, see [Using Microsoft Entra multifactor authentication](authentication-mfa-ssms-overview.md).
> SQL Managed Instance supports logins for Microsoft Entra users, as well as Microsoft Entra ID contained database users. The following steps show how to create a login and user for a Microsoft Entra guest user in SQL Managed Instance. You can also choose to create a [contained database user](/sql/relational-databases/security/contained-database-users-making-your-database-portable) in SQL Managed Instance by using the method in the [Create guest user in SQL Database and Azure Synapse](#create-guest-user-in-sql-database-and-azure-synapse) section.
64
+
> SQL Managed Instance supports logins for Microsoft Entra users, as well as Microsoft Entra ID contained database users. The following steps show how to create a login and user for a Microsoft Entra guest user in SQL Managed Instance. You can also choose to create a [contained database user](/sql/relational-databases/security/contained-database-users-making-your-database-portable) in SQL Managed Instance by using the method in the **SQL Database and Azure Synapse** tab.
62
65
63
66
1. Ensure that the guest user is already added into your Microsoft Entra tenant and a Microsoft Entra admin has been set for the SQL Managed Instance. Having a Microsoft Entra admin is required for Microsoft Entra authentication.
64
67
@@ -86,6 +89,69 @@ Follow these steps to create a database user using a Microsoft Entra guest user.
86
89
87
90
1. Disconnect and sign into the database as the guest user using [SQL Server Management Studio (SSMS)](/ssms/sql-server-management-studio-ssms) using the authentication method **Azure Active Directory - Universal with MFA**. For more information, see [Using Microsoft Entra multifactor authentication](authentication-mfa-ssms-overview.md).
88
91
92
+
### [SQL Server](#tab/sql-server)
93
+
94
+
> [!NOTE]
95
+
> Use this section after Microsoft Entra authentication is enabled for your SQL Server on Azure VMs or Arc-enabled SQL Server.
96
+
97
+
1. Verify that Microsoft Entra authentication is enabled for the SQL Server.
98
+
99
+
1. Make sure the guest user is already added to your Microsoft Entra tenant.
100
+
101
+
1. Verify that the managed identity selected for enabling Microsoft Entra authentication has either the **Directory Readers** role or these Microsoft Graph app roles: **User.Read.All**, **GroupMember.Read.All**, and **Application.Read.All**.
102
+
103
+
1. Connect to the SQL Server instance as a Microsoft Entra admin (sysadmin).
104
+
105
+
1. Create the guest user using one of the following options:
106
+
107
+
**Option A: Create a login first (server principal), then create a database user from that login**
108
+
109
+
```sql
110
+
-- Run in master
111
+
CREATE LOGIN [<guest_user>] FROM EXTERNAL PROVIDER;
112
+
GO
113
+
```
114
+
115
+
```sql
116
+
-- Run in the target user database
117
+
CREATE USER [<guest_user>] FROM LOGIN [<guest_user>];
118
+
GO
119
+
```
120
+
121
+
**Option B: Create a contained database user (no server login)**
122
+
123
+
```sql
124
+
-- Run in the target user database
125
+
CREATE USER [<guest_user>] FROM EXTERNAL PROVIDER;
126
+
GO
127
+
```
128
+
129
+
#### Set a guest user as a server admin
130
+
131
+
In this section, replace `<guest_user>` with a valid email address, for example `guest_user@example.com`.
132
+
133
+
```sql
134
+
USE [master];
135
+
GO
136
+
```
137
+
138
+
```sql
139
+
-- Create the Microsoft Entra login for the guest user
140
+
CREATE LOGIN [<guest_user>] FROM EXTERNAL PROVIDER;
141
+
GO
142
+
```
143
+
144
+
```sql
145
+
-- Grant full server admin rights
146
+
ALTER SERVER ROLE [sysadmin] ADD MEMBER [<guest_user>];
147
+
GO
148
+
```
149
+
150
+
> [!NOTE]
151
+
> If you want guest users to be able to create other Microsoft Entra logins or users, they must have permissions to read other identities in the Microsoft Entra directory. This permission is configured at the directory-level. For more information, see [guest access permissions in Microsoft Entra ID](/entra/identity/users/users-restrict-guest-permissions).
152
+
153
+
---
154
+
89
155
## Set a guest user as a Microsoft Entra admin
90
156
91
157
Set the Microsoft Entra admin using either the Azure portal, Azure PowerShell, or the Azure CLI. In this section, replace `<guest_user>` with a valid email address, for example `guest_user@example.com`.
@@ -149,3 +215,5 @@ You can also use the Azure CLI command [az sql mi ad-admin](/cli/azure/sql/mi/ad
149
215
-[Configure and manage Microsoft Entra authentication with Azure SQL](authentication-aad-configure.md)
150
216
-[Using Microsoft Entra multifactor authentication](authentication-mfa-ssms-overview.md)
151
217
-[CREATE USER (Transact-SQL)](/sql/t-sql/statements/create-user-transact-sql)
218
+
-[Microsoft Entra authentication for Arc-enabled SQL Server](/sql/sql-server/azure-arc/microsoft-entra-authentication-with-managed-identity)
219
+
-[Configure Microsoft Entra authentication for SQL Server on Azure VMs](/azure/azure-sql/virtual-machines/windows/configure-azure-ad-authentication-for-sql-vm)
Copy file name to clipboardExpand all lines: azure-sql/database/authentication-aad-overview.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -206,7 +206,7 @@ To get started, review [Configure Microsoft Entra multifactor authentication](au
206
206
207
207
## Microsoft Entra B2B support
208
208
209
-
Microsoft Entra authentication in all SQL products also supports [Microsoft Entra B2B collaboration](/entra/external-id/what-is-b2b), which enables businesses to invite guest users to collaborate with their organization. Guest users can connect to databases either as individual users or members of a Microsoft Entra group. For more information, see [Create guest user](authentication-aad-guest-users.md#create-guest-user-in-sql-database-and-azure-synapse).
209
+
Microsoft Entra authentication in all SQL products also supports [Microsoft Entra B2B collaboration](/entra/external-id/what-is-b2b), which enables businesses to invite guest users to collaborate with their organization. Guest users can connect to databases either as individual users or members of a Microsoft Entra group. For more information, see [Create database user for Microsoft Entra guest user](authentication-aad-guest-users.md#create-database-user-for-microsoft-entra-guest-user).
210
210
211
211
## Trust architecture for Microsoft Entra federation to Active Directory
Copy file name to clipboardExpand all lines: azure-sql/database/free-offer.md
+7-9Lines changed: 7 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,5 +1,5 @@
1
1
---
2
-
title: Deploy for Free
2
+
title: Try Azure SQL Database for Free
3
3
description: Guidance on how to deploy the Azure SQL Database offer for up to 10 free databases.
4
4
author: WilliamDAssafMSFT
5
5
ms.author: wiassaf
@@ -22,10 +22,6 @@ To get started and quickly create a new free Azure SQL Database, select the **Tr
22
22
23
23
:::image type="content" source="media/free-offer/show-options-create-sql-database.png" alt-text="Screenshot from the Azure portal showing the Azure SQL hub and the Try for free link in the Azure SQL Database pane." lightbox="media/free-offer/show-options-create-sql-database.png":::
24
24
25
-
You know the offer has been applied when the **Cost summary** card on the right side of the page shows **Estimated Cost/Month** zero cost.
26
-
27
-
:::image type="content" source="media/free-offer/cost-summary-card.png" alt-text="Screenshot from the Azure portal of the Free Offer Cost summary card.":::
28
-
29
25
## Prerequisites
30
26
31
27
To create a free Azure SQL Database, you need:
@@ -37,9 +33,7 @@ To create a free Azure SQL Database, you need:
37
33
38
34
## Create a database
39
35
40
-
Use the Azure portal to create the new free Azure SQL Database.
41
-
42
-
To create a free offer database, follow these steps:
36
+
Use the Azure portal to create the new free Azure SQL Database. To create a free offer database, follow these steps:
43
37
44
38
1. Select the **Try for free** link on the [Azure SQL hub at aka.ms/azuresqlhub](https://aka.ms/azuresqlhub).
45
39
- You can also find the **Apply offer** banner on the [provisioning page for Azure SQL Database](https://portal.azure.com/#create/Microsoft.SQLDatabase), and proceed with the steps to [Create a single database in the serverless compute tier](single-database-create-quickstart.md?view=azuresql-db&preserve-view=true&tabs=azure-portal#create-a-single-database).
@@ -56,7 +50,11 @@ To create a free offer database, follow these steps:
56
50
- Use the automatically-created unique **Database name**, or provide a new name.
57
51
- An existing logical **Server** is already selected. You can change this or create a new logical server.
58
52
59
-
That's all that's needed! The new database will be created with defaults, including the option to pause the database when the free limits are reached. This and other options can be changed in the future.
53
+
That's all that's needed! The new database will be created with defaults, including the option to pause the database when the free limits are reached. This and other options can be changed in the future.
54
+
55
+
You know the offer has been applied when the **Cost summary** card on the right side of the page shows **Estimated Cost/Month** zero cost.
56
+
57
+
:::image type="content" source="media/free-offer/cost-summary-card.png" alt-text="Screenshot from the Azure portal of the Free Offer Cost summary card.":::
This article provides steps to restart an Azure SQL Database or elastic pool from the Azure portal.
21
21
22
22
> [!IMPORTANT]
23
-
> The restart feature in the Azure portal is in preview and not recommended for production use. Hyperscale databases and Hyperscale elastic pools aren't supported in this preview.
23
+
> The restart feature in the Azure portal is in preview and not recommended for production use.
24
24
25
-
The restart operation is designed to resolve transient issues that might affect database connectivity or performance. Restarting a database or elastic pool temporarily takes it offline, causing a brief interruption in service. However, it doesn't affect the data stored within the database. The restart operation utilizes the same APIs that can be used to [test your application fault resiliency](high-availability-sla-local-zone-redundancy.md#test-application-fault-resiliency).
25
+
The restart operation is designed to resolve transient issues that might affect database connectivity or performance. Restarting a database or elastic pool temporarily takes it offline, causing a brief interruption in service. However, it doesn't affect the data stored within the database. The restart operation utilizes the same APIs that can be used to [test your application fault resiliency](high-availability-sla-local-zone-redundancy.md#test-application-fault-resiliency).
26
+
27
+
Only one failover call is allowed every 15 minutes for each database or elastic pool.
28
+
29
+
The restart operation is not recommended for use when there are wide-spread service issues. Before initiating a restart, check [Azure Service Health](/azure/service-health/overview) for any ongoing issues.
0 commit comments