Configure SQL best practices assessment

Best practices assessment provides a mechanism to evaluate the configuration of your SQL Server. Once the best practices assessment feature is enabled, your SQL Server instance and databases are scanned to provide recommendations for things like SQL Server and database configurations, index management, deprecated features, enabled or missing trace flags, statistics, etc.

Assessment run time depends on your environment (number of databases, objects, and so on), with a duration from a few minutes, up to an hour. Similarly, the size of the assessment result also depends on your environment. Assessment runs against your instance and all databases on that instance. In our testing, we observed that an assessment run can have up to 5-10% CPU impact on the machine. In these tests, the assessment was done while a TPC-C like application was running against the SQL Server.

This article provides instructions for using best practices assessment on an instance of Azure Arc-enabled SQL Server.

The Environment Health assessment is replaced with a much richer best practices assessment (SQL BPA). You will have to re-configure the SQL BPA to continue to get SQL server assessments. You can still access the previous health assessments by querying the table SQLAssessmentRecommendation from Log Analytics workspace used by Environment Health assessments. You can also query and export the data from previous assessments into Excel. See the steps at Integrate Log Analytics and Excel.


Best practices assessment is available only for SQL Servers purchased through either Software Assurance or pay-as-you-go (PAYG) licensing options.

For instructions to configure the appropriate license type, review Manage SQL Server license and billing options.


  • Your Windows-based SQL Server instance is connected to Azure. Follow the instructions to onboard your SQL Server instance to Arc-enabled SQL Server.


    Best practices assessment is currently limited to SQL Server running on Windows machines. This will not work for SQL on Linux machines.

  • If SQL Server is hosting a single SQL Server instance make sure that the version of Azure Extension for SQL Server (WindowsAgent.SqlServer) is "1.1.2202.47" or above. In the case of SQL Server hosting multiple SQL Server instances, make sure that the version of Azure Extension for SQL Server (WindowsAgent.SqlServer) is greater than "1.1.2231.59". Learn how to check the Azure Extension for SQL Server version and update to the latest.

  • A Log Analytics workspace in the same subscription as your Arc-enabled SQL Server resource to upload assessment results to.

  • The user configuring SQL BPA must have following permissions.

    • Log Analytics Contributor role on Resource Group or Subscription of the Log Analytics workspace.

    • Azure Connected Machine Resource Administrator role on the Resource Group or Subscription of the Arc-enabled SQL Server.

    • Monitoring Contributor role on the Resource group or Subscription of Log Analytics Workspace & Resource group or Subscription of Arc Machine.

      Users can be assigned to built-in roles such as Contributor or Owner. These roles have sufficient permissions. For more information, review Assign Azure roles using the Azure portal for more information.

  • The SQL Server built-in login NT AUTHORITY\SYSTEM must be the member of SQL Server sysadmin server role for all the SQL Server instances running on the machine.

  • If outbound connectivity is restricted by your firewall or proxy server, make sure the URLs from target SQL Server machine, make sure the URLs listed below allowed access to Azure Arc over TCP port 443.

    • <virtual-machine-region-name>
    • <log-analytics-workspace-id>
  • Your SQL Server instance must have the TCP/IP protocol enabled.

  • The SQL Server browser service must be running if you're operating a named instance of SQL Server.

Enable best practices assessment

  1. Sign into the Azure portal and go to your Arc-enabled SQL Server resource

  2. Open your Arc-enabled SQL Server resource and select Best practices assessment in the left pane or Best practices assessment tab in the Capabilities tab of the Overview page.

    Screenshot showing how to enable the best practices assessment screen of an Arc-enabled SQL Server resource.

  3. If the Log Analytics Workspace is not created or the current user does not have Log Analytics Contributor role assigned for the Resource Group or Subscription, you can't initiate the on-demand SQL Assessment. Review the Prerequisites section above.

    Screenshot showing how to specify the log analytics workspace for SQL Server best practices assessment.

  4. Select the Log Analytics Workspace from the drop-down menu and select Enable assessment.

    Screenshot showing the enable best practices assessment screen of an Arc-enabled SQL Server resource.


    After you enable the assessment, setup and configuration can take a few minutes.

    Best practices assessment is enabled for all SQL Server instances running on the machine and assess the SQL Server host comprehensively.

  5. Upon successful best practices assessment deployment, the assessment is scheduled to run every Sunday 12:00 AM local time by default.

    Screenshot showing the successful enablement of best practices assessment of an Arc-enabled SQL Server resource.

Modify license type

If an instance of SQL Server is configured with a license only type of license, you will need to change the license type to configure best practices assessment. For more information, see Manage SQL Server license and billing options.

Screenshot of Azure portal change license type.

Manage best practices assessment

After you have enabled the best practices assessment, you can run, or configure the assessment as required.

  • To run the assessment on demand from the portal, select Run assessment.

    Screenshot showing run assessment.


    Performing any of the tasks below on a specific SQL Server instance will be applied to all SQL Server instances running on the machine.

    The View assessment results is inactive until the results are ready in Log Analytics. This process might take up to two hours after the data files are processed on the target machine.

    Screen shot showing configuration control and schedule control.

  • To schedule assessments, select Configuration > Schedule assessment.

    Screen shot showing configuration control and disable assessment control.

  • To disable an assessment select Configuration > Disable assessment.

View best practices assessment results

  • On the Best practices assessment pane, select View assessment results.

Results page

The Results page reports all the issues categorized based on their severity for all the SQL Server instances running on the machine. You can switch the results view between the SQL Server instances running on the machine and assessment execution times using the top-down menus "Instance name" and "Collected at" respectively. The recommendations are organized into All, New, and Resolved tabs. The tabs can be used to view all the recommendations from the currently selected run, the newer recommendations compared to the previous run, and the resolved recommendations from the previous runs respectively. The tabs help to keep track of the progress between the runs. The Insights tab identifies the most recurring issues and the databases with the maximum number of issues.

The graph groups assessment results in different categories of severity - high, medium, low, and information. Select each category to see the list of recommendations, or search for key phrases in the search box. It's best to start with the most severe recommendations and go down the list. The first grid shows each recommendation and the affected instances in the environment with the reported issues. When a row is selected in the first grid, the second grid lists all the affected instances for that particular recommendation. If no recommendation is selected, then the second grid shows all the recommendations. In case of a large number of reported recommendations, the results can be filtered using the drop-downs above the grid, namely Name, Severity, Tags, and Check Id. The Export to Excel and Open the last run query in the Logs view options at the top right of the grid can also be used to download the results and open the results in the Log Analytics workspace blade respectively.

The passed section of the graph identifies recommendations your system already follows. View detailed information for each recommendation by selecting the Message field, such as a long description, and relevant online resources.

There are three charts on the Trends page to show changes over time: all issues, new issues, and resolved issues. The charts help you see your progress. Ideally, the number of recommendations should decrease while the number of resolved issues increases. The legend shows the average number of issues for each severity level. Hover over the bars to see the individual values for each run.

If there are multiple runs in a single day, only the latest run is included in the graphs on the Trends page.

Known issues

  • Best practices assessment is currently limited to SQL Server running on Windows machines. This will not work for SQL on Linux machines.
  • It may take a few seconds to populate the history of the previous execution of the assessments on the best practices home page.
  • A failure on one or more SQL Server instances, mark the assessment failure for all SQL Server instances running on the same machine. You can view the assessment results for successful SQL Server instances by directly querying the log analytical workspaces. You can find a few sample queries here.

Next steps