SQL in Azure VM, What are minimal access rights to make "SQL Server configuration" in Azure portal workable ?

Martinek, Jiri 21

What are minimal access rights to make "SQL Server configuration" in Azure portal workable ? VM contributor together with SQL* roles are not sufficient , It hangs in loading. For owner it works of course.

JamesTran-MSFT 36,651 Reputation points Microsoft Employee

2022-05-03T23:45:22.017+00:00
@Martinek, Jiri
Thank you for your post and I apologize for the delayed response!

For the Azure RBAC side of things, can you share a screenshot of what you're trying to do, so I can gain a better understanding of your issue?

Is the SQL Server Configuration option located within the Azure Portal? Is this within a SQL DB or SQL Server VM?

Are you receiving any error messages when the page hangs or fails to load?

Any additional information would be greatly appreciated!
Thank you for your time and patience throughout this issue.
Martinek, Jiri 21 Reputation points

2022-05-04T05:12:33.477+00:00

Hello,
Here are more details:
There is no error message.
Yes, it is SQL Configuration option in Azure portal.
SQL installed on VM.
It works for subscription owner normally :), but i am searching some minimal access for DB admins, and smthg is missing in my rbac estimate.
In other words, is there any role i can add to allow access SQL Configuration generally. SQL server Contributor is not the right one. (Purpose of this one are only SQL servers for PaaS seems)
Is some custom role only option ?
Pictures attached.
Thank you

Accepted answer

JamesTran-MSFT 36,651 Reputation points Microsoft Employee

2022-05-05T22:08:10.557+00:00

@Martinek, Jiri
Thank you for the quick follow up and for sharing a screenshot of your issue!

When it comes to the RBAC role in order to access the SQL Server Configuration page, I was able to do this with the VM Contributor role assigned at the Resource Group level. Since the VM and SQL VM are both Virtual Machines, assigning the VM Contributor role at the Resource (for both resources) or Resource Group scope should resolve your issue.

Note: When assigning new RBAC roles, please allow ~5-10minutes for the new permissions to propagate.

If you're still having issues, please let me know.
Thank you for your time and patience throughout this issue.
Please sign in to rate this answer.
Martinek, Jiri 21 Reputation points

2022-05-06T05:43:44.93+00:00

Thank you!
So, it means - if the sql vm is counted also as a "normal" vm then I can't provide access on subscription level and grant access just only for all SQLs. Am I right?

JamesTran-MSFT 36,651 Reputation points Microsoft Employee

2022-05-06T22:11:47.687+00:00

@Martinek, Jiri
Thank you for following up on this!

For the RBAC side of things, if you assign the VM Contributor role at the Subscription level the role will "inherit" at the resource level too. However, if you're having issues with the SQL Config page specifically, you can always try to assign the RBAC role at the Resource/Resource Group level for another user to see if that resolves the issue. When walking through this in my lab, I didn't run into any issues with loading the SQL Config page with the VM Contributor role.

If you're still having issues, can you try accessing the page from another browser?

Or see if any other users within your tenant are running into this issue?

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

----------

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

SQL in Azure VM, What are minimal access rights to make "SQL Server configuration" in Azure portal workable ?

0 additional answers

Your answer