A company runs Microsoft SQL Server in an on-premises virtual machine (VM).
You must migrate the database to Azure SQL Database. You synchronize users from Active Directory to Azure Active Directory (Azure AD).
You need to configure Azure SQL Database to use an Azure AD user as administrator.
What should you configure?
To configure an Azure SQL Database to use an Azure AD user as an administrator, you need to set the Active Directory administrator at the server level. Each SQL Database server in Azure starts with a single server administrator account which has administrative rights over all databases on that server. The second administrator account, which is the Azure AD account, needs to be configured at this server level, not individually for each database.
Admin user is defined at server level. Answer is B
+1 for this answer
+1 for this answer
+1 for this answer
Appropriate answer
All resources --> Active Directory Admin --> Set Admin Answer is B
When you create an Azure SQL server, you must designate a Server admin login. SQL server creates that account as a login in the master database. Answer B
The way B is worded, it doesnt make any sense. The only answer that is even remotely close to setting the AD admin role is C, despite it being the wrong scope (DB instead of Server).
There is a setting named Active Directory admin only in the SQL server blade, so answer B seems more appropriate. But wording is indeed excessively unclear.
B: Admin is at server level. not C: as each server in Azure (which hosts SQL Database) starts with a single server administrator account that is the administrator of the entire server. i.e. Admin at server level. not D: as role-based access control (RBAC) applies only to the Azure portal and isn't propagated to SQL Database.
The requirement was "You need to configure Azure SQL Database to use an Azure AD user as administrator." Admin cannot be defined on DB level. Therefore the only possible answer is B - set AD admin for the server, that will become an admin for the databases on that server.
It should be B
Based on the scope of the question which seems to be related to databases and not logical servers, it may make sense for the answers to within this scope. I do reason with you as Active Directory Admin is defined at the server level.
Based on the scope of the question which seems to be related to databases and not logical servers, it may make sense for the answers to within this scope. I do reason with you as Active Directory Admin is defined at the server level.
Answer is C An Azure AD administrator must be configured if you want to use Azure AD accounts to connect to SQL Database, SQL Managed Instance, or Azure Synapse. Refer https://docs.microsoft.com/en-us/azure/azure-sql/database/logins-create-manage
To configure Azure AD admin account to a Database, it references to this link: https://docs.microsoft.com/en-us/azure/azure-sql/database/authentication-aad-configure?tabs=azure-powershell ... in the screenshots you see that configuration has to be set on the server level. If you check the portal you can see that there is NO option to configure the AD admin at the database level. So the answer is B, but agree that the wording is incorrect.
From link https://docs.microsoft.com/en-us/azure/azure-sql/database/logical-servers: When you create a server, you provide a server login account and password that has administrative rights to the master database on that server and all databases created on that server. This initial account is a SQL login account. Azure SQL Database and Synapse Analytics support SQL authentication and Azure Active Directory Authentication for authentication. Answer is B
B - the pic bellow says it all: server level (This article shows you how to create and populate an Azure Active Directory (Azure AD) instance, and then use Azure AD with Azure SQL Database, Azure SQL Managed Instance, and Azure Synapse Analytics) https://docs.microsoft.com/pt-pt/azure/azure-sql/database/media/authentication-aad-configure/set-admin.png
Azure AD admin with a server in SQL Database Each server in Azure (which hosts SQL Database or Azure Synapse) starts with a single server administrator account that is the administrator of the entire server. Create a second administrator account as an Azure AD account. This principal is created as a contained database user in the master database of the server. Administrator accounts are members of the db_owner role in every user database, and enter each user database as the dbo user. https://docs.microsoft.com/en-us/azure/azure-sql/database/authentication-aad-configure?tabs=azure-powershell The correct answer is : B
https://docs.microsoft.com/en-us/azure/azure-sql/database/authentication-aad-configure?tabs=azure-powershell Answer is B
Using AD as administrator for SQL Databases should be on a Database level. (Check diagaram in this page) ---> https://docs.microsoft.com/en-us/azure/azure-sql/database/authentication-aad-overview
C - Practically it makes sense to configure previliges at database level than SQL server level.
eh...Sorry, I cant delete the above. There is no option to configure the AD admin at database level. You can do it only at server level. So answer is B
C is correct. As mentioned in the answer there are two accounts, with admin permissions to a database. Server Admin Login and Active Directory Admin. Server Admin is I guess nothing to do with AD. Go to "Performance" tab for Azure Database for reference. It is mentioned there
EDIT. C is correct. As mentioned in the answer there are two accounts, with admin permissions to a database. Server Admin Login and Active Directory Admin. Server Admin is I guess nothing to do with AD. Go to "Properties" tab for Azure Database for reference. It is mentioned there
Well, if you go to the link and go to the properties as you've mentioned --> the option is dimmed and you cannot edit it. you have to do it from the Azure sql server and not Azure sql db
As per below link, the answer should be B. https://docs.microsoft.com/en-us/azure/azure-sql/database/logins-create-manage
C is Right , Under SQL Server -> select SQL database -> Select ACTIVE DIRETORY ADMIN -> Set Admin -> Select User or Azure AD group -> Save them as Admin role (Az AD Admin of the SQL database) https://docs.microsoft.com/en-us/azure/azure-sql/database/authentication-aad-configure?tabs=azure-powershell#provision-azure-ad-admin-sql-database
my friend, you have accessed the sql server and not sql db. Answer is B
Correct answer is B
Just created a new Azure SQL server and a new Azure sql DB. Answer it B.
correct answer is B. I did a practical implementation for the same
The question mentions migrating just 'one' database. Do we need to grant admin access to a DB server (group of DBs) ? Doesn't go with the minimal access practice. Don't agree with B.
the correct answer is B 100%