blocks|key|1563931|text|在连接到AAD凭据或创建任何AAD数据库用户之前，必须为实例配置Azure+Active管理。请参阅使用Azure+SQL配置和管理Azure+AD身份验证|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|1563932|设置AAD管理员后，将其连接为AAD管理或AAD安全组的成员，设置为AAD管理和创建映射到Azure+AD标识的包含用户，例如|1563933|CREATE+USER+[bob@contoso.com]+FROM+EXTERNAL+PROVIDER;|code-block|syntax|javascript|1563934|或|1563935|CREATE+USER+[ICU+Nurses]+FROM+EXTERNAL+PROVIDER;|1563936|entityMap|0|LINK|mutability|MUTABLE|url|https://learn.microsoft.com/en-us/azure/azure-sql/database/authentication-aad-configure?tabs=azure-powershell|1|https://learn.microsoft.com/en-us/azure/azure-sql/database/authentication-aad-configure?tabs=azure-powershell#create-contained-users-mapped-to-azure-ad-identities^0|1E|S|0|0|14|K|1|0|0|0|0^^$0|@$1|2|3|4|5|6|7|Y|8|@]|9|@$A|Z|B|10|1|11]]|C|$]]|$1|D|3|E|5|6|7|12|8|@]|9|@$A|13|B|14|1|15]]|C|$]]|$1|F|3|G|5|H|7|16|8|@]|9|@]|C|$I|J]]|$1|K|3|L|5|6|7|17|8|@]|9|@]|C|$]]|$1|M|3|N|5|H|7|18|8|@]|9|@]|C|$I|J]]|$1|O|3|-4|5|6|7|19|8|@]|9|@]|C|$]]]|P|$Q|$5|R|S|T|C|$U|V]]|W|$5|R|S|T|C|$U|X]]]]

You must configure an Azure Active Directory Admin for the instance before you can connect with AAD credentials or create any AAD Database Users. See <a href="https://learn.microsoft.com/en-us/azure/azure-sql/database/authentication-aad-configure?tabs=azure-powershell" rel="nofollow noreferrer">Configure and manage Azure AD authentication with Azure SQL</a> 

Once you've set the AAD Administrator, connect as the AAD Admin or a member of the AAD Security Group set as the AAD Admin and <a href="https://learn.microsoft.com/en-us/azure/azure-sql/database/authentication-aad-configure?tabs=azure-powershell#create-contained-users-mapped-to-azure-ad-identities" rel="nofollow noreferrer">Create contained users mapped to Azure AD identities</a>, eg

<pre><code>CREATE USER [bob@contoso.com] FROM EXTERNAL PROVIDER;
</code></pre>

or

<pre><code>CREATE USER [ICU Nurses] FROM EXTERNAL PROVIDER;
</code></pre>

blocks|key|1564012|text|对于ARM模板，可以在Server资源中添加以下内容：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1564013|++"resources":+[
++++{
++++++"name":+"ActiveDirectory",
++++++"type":+"administrators",
++++++"location":+"[parameters('location')]",
++++++"apiVersion":+"2019-06-01-preview",
++++++"properties":+{
++++++++"administratorType":+"ActiveDirectory",
++++++++"login":+"[parameters('sqlADadmin')]",
++++++++"sid":+"[parameters('sqlADadminObjectID')]",
++++++++"tenantId":+"[subscription().tenantId]"
++++++},
++++++"dependsOn":+[
++++++++"[resourceId('Microsoft.Sql/servers',+variables('sqlServerName'))]"
++++++]
++++}|code-block|syntax|javascript|1564014|这是API文档|offset|length|1564015|您不需要，需要、Azure和您正在进行sql的帐户/组的登录名。|style|BOLD|1564016|这可以通过Powershell中的Get-AzureADUser或门户中的|1564017|entityMap|0|LINK|mutability|MUTABLE|url|https://learn.microsoft.com/en-us/azure/templates/microsoft.sql/2019-06-01-preview/servers/administrators|1|https://learn.microsoft.com/en-us/powershell/module/azuread/get-azureaduser?view=azureadps-2.0|2|http://blog.schertz.name/2018/06/locating-ids-in-azure-ad/^0|0|0|2|5|0|0|4|3|0|H|F|1|X|2|2|0^^$0|@$1|2|3|4|5|6|7|12|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|13|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|14|8|@]|9|@$I|15|J|16|1|17]]|A|$]]|$1|K|3|L|5|6|7|18|8|@$I|19|J|1A|M|N]]|9|@]|A|$]]|$1|O|3|P|5|6|7|1B|8|@]|9|@$I|1C|J|1D|1|1E]|$I|1F|J|1G|1|1H]]|A|$]]|$1|Q|3|-4|5|6|7|1I|8|@]|9|@]|A|$]]]|R|$S|$5|T|U|V|A|$W|X]]|Y|$5|T|U|V|A|$W|Z]]|10|$5|T|U|V|A|$W|11]]]]

For the ARM template here is what can be added inside the sql Server Resource:
<pre><code> &quot;resources&quot;: [
 {
 &quot;name&quot;: &quot;ActiveDirectory&quot;,
 &quot;type&quot;: &quot;administrators&quot;,
 &quot;location&quot;: &quot;[parameters('location')]&quot;,
 &quot;apiVersion&quot;: &quot;2019-06-01-preview&quot;,
 &quot;properties&quot;: {
 &quot;administratorType&quot;: &quot;ActiveDirectory&quot;,
 &quot;login&quot;: &quot;[parameters('sqlADadmin')]&quot;,
 &quot;sid&quot;: &quot;[parameters('sqlADadminObjectID')]&quot;,
 &quot;tenantId&quot;: &quot;[subscription().tenantId]&quot;
 },
 &quot;dependsOn&quot;: [
 &quot;[resourceId('Microsoft.Sql/servers', variables('sqlServerName'))]&quot;
 ]
 }
</code></pre>
Here is the <a href="https://learn.microsoft.com/en-us/azure/templates/microsoft.sql/2019-06-01-preview/servers/administrators" rel="nofollow noreferrer">API documentation</a>
Not you need both the Azure AD objectId and the login name of the account/group you are making sql admins.
This can be obtain via <a href="https://learn.microsoft.com/en-us/powershell/module/azuread/get-azureaduser?view=azureadps-2.0" rel="nofollow noreferrer">Get-AzureADUser</a> in Powershell or in the <a href="http://blog.schertz.name/2018/06/locating-ids-in-azure-ad/" rel="nofollow noreferrer">Portal</a>

blocks|key|539694|text|我也遇到了同样的问题，要解决这个问题，您需要单击按钮，然后单击选项卡和必须用您想要/拥有访问权限的数据库名称替换的字段。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|539695|出现此问题是因为用户的默认数据库是主数据库，但用户无法访问主数据库。|539696|另一种选择是让用户访问主数据库，但通常您不希望这样做。|539697|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|H|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|I|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|J|8|@]|9|@]|A|$]]|$1|F|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|G|$]]

I had the same problem, to fix, you need to click on the button then on the tab and on the field you have to replace with the database name you want/have access.
The issue happens because the default database for the user is the master database but the user doesn't have access to the master database.
Another option is to give the user access to the master database, but usually you don't want this.

I have a SQL Server in Azure which is created using a simple ARM template. When I connect to the SQL Server using my sqladmin credentials I am able to connect to it fine. I am using SQL Server Management Studio for this.

<a href="https://i.stack.imgur.com/9i3tQ.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/9i3tQ.png" alt="enter image description here"></a>

However, When I use any of the following highlighted options, I am seeing an error message.
<a href="https://i.stack.imgur.com/Tc1LQ.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/Tc1LQ.png" alt="enter image description here"></a> 

The Error I am seeing is as shown below, its a pop-up window but I am pasting the text in it for easy reference.

<pre><code>TITLE: Connect to Server
------------------------------
Cannot connect to abcd-core-sql.database.windows.net.
------------------------------
ADDITIONAL INFORMATION:
</code></pre>

<blockquote>
<pre><code>**Login failed for user '&lt;token-identified principal&gt;'. (Microsoft SQL Server, Error: 18456)**
</code></pre>
</blockquote>

<pre><code>For help, click: http://go.microsoft.com/fwlink?ProdName=Microsoft%20SQL%20Server&amp;EvtSrc=MSSQLServer&amp;EvtID=18456&amp;LinkId=20476
</code></pre>

I would appreciate if anyone can comment on if I am missing anything in creating a SQL Server using the ARM template.In other words is there anything else that needs to be included in the config to get the azure ad authentication working for a sql db in azure.

<pre><code> {
 "type": "Microsoft.Sql/servers",
 "name": "[variables('sql_name')]",
 "apiVersion": "2015-05-01-preview",
 "location": "eastus2",
 "properties": {
 "administratorLogin": "[parameters('admin')]",
 "administratorLoginPassword": "[parameters('passwd')]",
 "version": "[variables('sqlversion')]"
 }
 },
</code></pre>

Unable to connect the sql database using azure

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我在Azure中有一个SQL Server，它是使用一个简单的ARM模板创建的。当我使用sqladmin凭据连接到Server时，我可以使用很好地连接到它。为此，我使用。​​但是，当我使用下列任何突出显示的选项时，我将看到一条错误消息。我看到的错误如下所示，这是一个弹出窗口，但我粘贴在其中的文本，以便于参考。TITLE...

问无法使用azure连接sql数据库。
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问无法使用azure连接sql数据库。EN