Lock-lab Azure SQL still has only the SQL server admin password. What must you configure so Microsoft Entra identities can become database principals?
Select an answer to reveal the explanation.
Short Explanation
Entra database auth doesn’t magically appear because someone has a password. Park an Entra admin on the logical server (or MI)—that’s the gate that lets Entra users and groups become SQL principals.
Full Explanation
Microsoft Entra authentication for Azure SQL Database and Azure SQL Managed Instance requires configuring a Microsoft Entra administrator on the logical server or instance. That admin can then create contained database users (or equivalent principals) from Entra identities. SQL firewall rules control network reachability, PIM governs privileged directory roles, and TDE or Always Encrypted do not replace setting the Entra admin.