Rediger

Del via


Create an Azure SQL Managed Instance with a user-assigned managed identity

Applies to: Azure SQL Managed Instance

This how-to guide outlines the steps to create an Azure SQL Managed Instance with a user-assigned managed identity from Microsoft Entra ID (formerly Azure Active Directory). For more information on the benefits of using a user-assigned managed identity for the server identity in Azure SQL Database, see User-assigned managed identity in Microsoft Entra for Azure SQL.

Note

Microsoft Entra ID was previously known as Azure Active Directory (Azure AD).

Prerequisites

  1. Browse to the Select SQL deployment option page in the Azure portal.

  2. If you aren't already signed in to Azure portal, sign in when prompted.

  3. Under SQL managed instances, leave Resource type set to Single instance, and select Create.

  4. Fill out the mandatory information required on the Basics tab for Project details and Managed Instance details. This is a minimum set of information required to provision a SQL Managed Instance.

    Azure portal screenshot of creating the SQL Managed Instance basic tab

    For more information on the configuration options, see Quickstart: Create an Azure SQL Managed Instance.

  5. Under Authentication, select a preferred authentication model. If you're looking to configure Microsoft Entra-only authentication, see the guide.

  6. Next, go through the Networking tab configuration, or leave the default settings.

  7. On the Security tab, under Identity, select Configure Identities.

    Screenshot of Azure portal security settings of the create managed instance process.

  8. On the Identity pane, under User assigned managed identity, select Add. Select the desired Subscription and then under User assigned managed identities select the desired user assigned managed identity from the selected subscription. Then select the Select button.

    Azure portal screenshot of adding user assigned managed identity when configuring managed instance identity.

    Azure portal screenshot of user assigned managed identity when configuring managed instance identity

  9. Under Primary identity, select the same user-assigned managed identity selected in the previous step.

    Azure portal screenshot of selecting primary identity for the managed instance

    Note

    If the system-assigned managed identity is the primary identity, the Primary identity field must be empty.

  10. Select Apply

  11. You can leave the rest of the settings default. For more information on other tabs and settings, follow the guide in the article Quickstart: Create an Azure SQL Managed Instance.

  12. Once you're done with configuring your settings, select Review + create to proceed. Select Create to start provisioning the managed instance.