What permissions are required to scale a database?

Question

Hi all,

I try to find what permissions are required to scale a database. But I cannot find that anywhere.

In my particular case, I run a powershell command from azure data factory and that fails, with the following error:

Failure type: User configuration issue
Details: Operation on target Get current database properties failed: {"error":{"code":"AuthorizationFailed","message": "The client 'xxxx-xxxx-xxxx' with object id 'xxxx-xxxx-xxxx' does not have authorization to perform action 'Microsoft.Sql/servers/databases/read' over scope '/subscriptions/xxxx-xxxx-xxxx/resourceGroups/XXXX/providers/Microsoft.Sql/servers/xxxx.database.windows.net/databases/DBNAME' or the scope is invalid. If access was recently granted, please refresh your credentials."}}

My ADF currently has the role 'SQL Server Contributor' on the azure sql server. But it looks like that is not enough?

Can anyone help me out here?

Many thanks,
Edgar Walther

Answer 1

The issue on our end is solved. The subscription guid appeared to be wrong in the url.

Answer 2

You need to add the Contributor role as you already did. Here you will find another way of doing the same using a Web Activity.

Another way to try the same is using a pipeline as explained here.

Answer 3

This is the relevant part of the json definition of the ADF pipeline:

{
                            "name": "Scale up database to requested service objective",
                            "type": "WebActivity",
                            "dependsOn": [],
                            "policy": {
                                "timeout": "0.02:00:00",
                                "retry": 1,
                                "retryIntervalInSeconds": 30,
                                "secureOutput": false
                            },
                            "userProperties": [],
                            "typeProperties": {
                                "url": "https://management.azure.com/subscriptions/<subscription guid>/resourceGroups/<rg name>/providers/Microsoft.Sql/servers/<sqlserver name>/databases/<database name>?api-version=2021-02-01-preview",
                                "method": "PUT",
                                "headers": {
                                    "Content-Type": "application/json"
                                },
                                "body": {
                                    "sku": {
                                        "name": "GP_S_Gen5_20"
                                    },
                                    "location": "UK South"
                                },
                                "authentication": {
                                    "type": "MSI",
                                    "resource": "https://management.azure.com"
                                }
                            }
                        }