Vulnerability assessment refuses to run for Azure SQL database

Question

Good morning

Since moving my resources from a free subscription last month, over to a paid subscription my Azure SQL databases fail to run the vulnerability assessment. After clicking for more details, I receive the error message:

The configured storage account 'sqlvallmzvr3wyv7ug' was not found in the subscriptions selected by your Global subscription filter, or you don't have permission to access it. Please add the subscription corresponding to the configured storage to your Global filter settings.

I have since checked the global filter settings which is set to 'All subscriptions' and looked in the old disabled subscription which has no resources left.

Can someone help me point the Vulnerability Assessment at a new storage account as I can't see how to do this?

Thanks

Answer 1

Hi

The answer to my issue was actually slightly different to both answers.

As I had moved these resources into a new subscription, it lost the connection to the storage account. I had to

• Go to the sql server
• Go to Microsoft Defender for Cloud under Security
• Click (Configure) where it says 'Microsoft Defender for SQL: Enabled at the server-level'
• Set the storage account to send the results to

Answer 2

Hi @Daniel Growns Thank you for posting your Question on Microsoft Q&A.
In addition to @Alberto Morillo answer.

Storage account requirements
The storage account in which vulnerability assessment scan results are saved must meet the following requirements:

Type: StorageV2 (General Purpose V2) or Storage (General Purpose V1)
Performance: Standard (only)
Region: The storage must be in the same region as the instance of Azure SQL Server.
If any of these requirements aren't met, saving changes to vulnerability assessment settings fails.

Permissions
The following permissions are required to save changes to vulnerability assessment settings:

SQL Security Manager
Storage Blob Data Reader
Setting a new role assignment requires owner or user administrator access to the storage account and the following permissions:

Storage Blob Data Owner

Please refer to the article above for more information.

Regards,
Oury

Answer 3

Try this step-by-step article to change the storage account associated with the vulnerability assessment.