Azure SQL PIM access

Question

Azure SQL PIM access

Aluri, Sirisha 1

Azure SQL PIM like access
I wanted to set-up something like a PIM access to Azure SQL but upon reading some docs/article, it's mostly adding a user to an AD Group or to the Azure SQL database itself.

Is there a way to do PIM or like that for Azure SQL or any of the Azure Databases?
Requirements:

no user has default access to the database
user need to request access and be removed based on duration automatically
audit of the users requesting access to the database

Looking forward to your reply.
Thanks.

Nandan Hegde 34,941 Reputation points MVP

2022-08-18T13:29:21.57+00:00

Hey,
Is your ask w.r.t giving access within database (to read,write etc on the data) or is it w.r.t giving rights on the database for configuring network,tier, audit aspects etc via Portal
Aluri, Sirisha 1 Reputation point

2022-08-18T14:14:41.383+00:00

Hey thanks for response, my ask w.r.t using PIM for granting access to our DBs. This would help limit when people can access our databases, keep an automatic audit trail of when people are able to access, and would save us time granting access to databases for a limited amount of time.

1 answer

Your answer

Nandan Hegde 34,941 Reputation points MVP

2022-08-18T13:29:21.57+00:00

Hey,
Is your ask w.r.t giving access within database (to read,write etc on the data) or is it w.r.t giving rights on the database for configuring network,tier, audit aspects etc via Portal
Aluri, Sirisha 1 Reputation point

2022-08-18T14:14:41.383+00:00

Hey thanks for response, my ask w.r.t using PIM for granting access to our DBs. This would help limit when people can access our databases, keep an automatic audit trail of when people are able to access, and would save us time granting access to databases for a limited amount of time.

Answer 1

Nandan Hegde 34,941 MVP

Hey,
Currently there is no method for using the PIM for Azure SQL at the moment.
Its based on the below access parts:
https://learn.microsoft.com/en-us/azure/azure-sql/database/logins-create-manage?view=azuresql
https://learn.microsoft.com/en-us/azure/azure-sql/database/authentication-aad-overview?view=azuresql
To grant access to users

@Alberto Morillo :please correct me if I am wrong

Alberto Morillo 34,651 Reputation points MVP

2022-08-18T16:59:59.767+00:00

@Nandan Hegde To my knowledge you are correct. Connections can use SQL logins, AD Authentication (including tokens), managed identity.
Mels de Zeeuw 0 Reputation points

2023-08-07T10:03:10.9433333+00:00

You can use PIM - Groups.
Give the PIM enabled Azure AD group the correct access rights to the database in SQL Management Studio and add the users as eligible to the PIM enabled group.

Share via

Azure SQL PIM access

1 answer

Your answer