This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(272, 2%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERD%3C/text%3E%3C/svg%3E)
give Entra Id access to azure sql database to another user
@Ray, David
If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
@Ray, David
I just wanted to check in and see if you had any other questions or if you were able to resolve this issue?
If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.
If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.
Please follow the below blog : https://michalmolka.medium.com/azure-sql-database-add-azure-active-directory-users-5c08f0249dfa which provides step by step details
@Ray, David
Thank you for reaching out.
My understanding is that you are trying to give another user access to an Azure SQL Database using Microsoft Entra ID.
Connect to the SQL database as the Microsoft Entra admin, or a Microsoft Entra user with sufficient SQL permissions to create users.
Run the below command.
CREATE USER [<guest_user>] FROM EXTERNAL PROVIDER;
You can assign role to the user.
ALTER ROLE [dbmanager] ADD MEMBER [AzureAD_object];
Tutorial: Create and utilize Microsoft Entra server logins If you encounter any issues, comment below so we can further assist. Regards, Oury
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(44.800000000000004, 90%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM%3C/text%3E%3C/svg%3E)
Hi,
I have one SQL MI but 2 databases into my SQL MI
I want to create 2 Entra-Id credential and for every credential give him only rights to see one database.
When i create a login from external provider and try to connect with Windows Authentication, i have the erreor : The login is from an untrusted domain and cannot be used with Integrated authentication
Note : for my windows authentication , It displays the AD prefix before my username; we have a local AD that is synchronized with Azure Entra ID.
Did you set up Windows Auth?
You can do Entra ID auth without it.
Secure with Microsoft Entra logins - Azure SQL Managed Instance | Microsoft Learn