Azure SQL PIM access

Question

Azure SQL PIM access

Aluri, Sirisha 1

Azure SQL PIM like access
I wanted to set-up something like a PIM access to Azure SQL but upon reading some docs/article, it's mostly adding a user to an AD Group or to the Azure SQL database itself.

Is there a way to do PIM or like that for Azure SQL or any of the Azure Databases?
Requirements:

no user has default access to the database
user need to request access and be removed based on duration automatically
audit of the users requesting access to the database

Looking forward to your reply.
Thanks.

Nandan Hegde 22,196 Reputation points

2022-08-18T13:29:21.57+00:00

Hey,
Is your ask w.r.t giving access within database (to read,write etc on the data) or is it w.r.t giving rights on the database for configuring network,tier, audit aspects etc via Portal
Aluri, Sirisha 1 Reputation point

2022-08-18T14:14:41.383+00:00

Hey thanks for response, my ask w.r.t using PIM for granting access to our DBs. This would help limit when people can access our databases, keep an automatic audit trail of when people are able to access, and would save us time granting access to databases for a limited amount of time.

Nandan Hegde 22,196 Reputation points

2022-08-18T13:29:21.57+00:00

Hey,
Is your ask w.r.t giving access within database (to read,write etc on the data) or is it w.r.t giving rights on the database for configuring network,tier, audit aspects etc via Portal
Aluri, Sirisha 1 Reputation point

2022-08-18T14:14:41.383+00:00

Hey thanks for response, my ask w.r.t using PIM for granting access to our DBs. This would help limit when people can access our databases, keep an automatic audit trail of when people are able to access, and would save us time granting access to databases for a limited amount of time.

Answer 1

Nandan Hegde 22,196

Hey,
Currently there is no method for using the PIM for Azure SQL at the moment.
Its based on the below access parts:
https://learn.microsoft.com/en-us/azure/azure-sql/database/logins-create-manage?view=azuresql
https://learn.microsoft.com/en-us/azure/azure-sql/database/authentication-aad-overview?view=azuresql
To grant access to users

@Alberto Morillo :please correct me if I am wrong

Alberto Morillo 26,031 Reputation points MVP

2022-08-18T16:59:59.767+00:00

@Nandan Hegde To my knowledge you are correct. Connections can use SQL logins, AD Authentication (including tokens), managed identity.

Azure SQL PIM access

1 answer

Activity