Add a user to a sql database in azure without syncing with entra id; where can i find ssms

Question

I am trying to add a db_writer to a database without tying my database to entra ID. I want people to access the database via seperate login and passwords. The documentation does appear to match whats available on my screen and I cannot find the role for db_writer in the list.

Answer 1

You may try:

Azure SQL Database then Portal Query editor (preview), in the database's left menu. Fastest given your owner access.

Any platform then Azure Data Studio or sqlcmd.

Inside a database (run via any of the tools above):

CREATE USER [username] WITH PASSWORD = 'StrongPassword!';  -- Azure SQL DB, contained user
ALTER ROLE db_datawriter ADD MEMBER [username];  -- edit data
ALTER ROLE db_datareader ADD MEMBER [username];  -- read data
ALTER ROLE db_ddladmin  ADD MEMBER [username];   -- create/alter tables, procs (schema)

Answer 2

If you don't have SSMS installed, I would recommend that you install and download it. Without SSMS, or some other query tool, administering a database is difficult. But there is a query editor in the Azure portal.

There is no predefined role db_writer, but there is a predefined db_datawriter. Membership in that role gives the user rights to insert, update and delete data in tables. However, you talk about other users being able to create web apps. The web apps themselves are created elsewhere, but possibly web app developers wants to create tables and stored procedures. Permission to do that does not follow with db_datawriter.

To that end, I recommend that you do:

CREATE ROLE my_ddladmin
ALTER MEMBER db_ddladmin ADD MEMBER my_ddladmin
DENY ALTER ANY DATABASE DDL TRIGGER TO my_ddladmin

Then you add developers to the role my_ddladmin.

That is, the predefined role db_ddladmin gives users rights to create stored procedures, tables etc. Unfortunately, it also gives them permission to deal with DDL triggers, something which should reserved for the database owner. This is why I recommend that you to create your own role.

Note that membership in db_ddladmin, does not give permission to change data in tables, so developers also need membership in db_ddladmin.

Answer 3

For Azure SQL Database, Microsoft Entra ID is not required. A SQL-authenticated database user can be created with its own username and password, then granted write access.

Use this flow in SQL Server Management Studio (SSMS):

1. Connect to the target Azure SQL database.
2. In Object Explorer, right-click the database and select New Query.
3. Run:

CREATE USER ApplicationUser WITH PASSWORD = 'YourStrongPassword1';

4. Grant write access:

ALTER ROLE db_datawriter ADD MEMBER ApplicationUser;

5. If read access is also needed:

ALTER ROLE db_datareader ADD MEMBER ApplicationUser;

db_writer is not the Azure SQL Database fixed role name shown in the documentation provided here. The documented fixed role for write access is db_datawriter.

If the goal is to let the user create tables or other schema objects, that is different from data write access. The provided context only documents fixed roles such as db_owner, db_ddladmin, db_datawriter, and db_datareader, and recommends using db_owner only for a few users.

SSMS is the tool referenced for connecting and running the query. The documented path is to connect with SQL Server Management Studio, then use Object Explorer and New Query.

---

References:

• # Tutorial: Secure a database in Azure SQL Database
• # Authorize database access to Azure SQL Database
• how do i add a new user in azure sql - Microsoft Q&A