Configure isolated access to a Hyperscale named replica using AAD groups

Krzysztof Żelazny 20 Reputation points
2023-04-18T11:58:50.6433333+00:00

I'm traing to configure isolated access in azure sql database base on article https://learn.microsoft.com/en-us/azure/azure-sql/database/hyperscale-named-replica-security-configure?view=azuresql&tabs=SQL-Authentication to a Named replica using AAD groups, unfortunately when I use AAD groups I can login to primary replica indicating user database in SSMS options (Connect to database) Anybody can help me to prevent login users to primary replica user database ?

Azure SQL Database
Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments No comments
{count} votes

Accepted answer
  1. Oury Ba-MSFT 20,931 Reputation points Microsoft Employee Moderator
    2023-04-19T19:54:15.74+00:00

    Krzysztof Żelazny Thank you for reaching out. To prevent users from being able to connect to the user database on the primary replica, you can configure firewall rules on the primary replica to restrict access to the user database. Please try the following steps

    1. Go to your Azure SQL Database instance in the Azure Portal.
    2. Go to networking tab.
    3. Under "Firewall rules", click "Add client IP" to add your current IP address to the list of allowed IP addresses.
    4. Under "Virtual network service endpoints", select the virtual network and subnet that you want to use for the named replica.
    5. Click "Save" to apply the changes.
    6. Once you are connected to the named replica, you can create firewall rules to restrict access to the user database on the primary replica. You can do this by adding a firewall rule that blocks all traffic to the IP address of the primary replica. This will only prevent users from connecting to the user database on the primary replica. It will not prevent them from connecting to the primary replica itself, or to other databases on the primary replica. If you need to restrict access to the primary replica itself, you can follow the instruction in this doc Configure isolated access to a Hyperscale named replica. I User's image Please comment below if you face any issues. Regards, Oury
    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.