0
votes

I have been able to set up an active directory login for my Azure database. Now I want to add additional active directory logins and set their permissions

I understand that I need to use Management Studio to do this and have installed SSMS v17.8.1

I have been studying docs but I can't find the instructions

[Update]

After reading Conor's answer I was able to create the user

CREATE USER [jobuser@mydomain] FROM EXTERNAL PROVIDER WITH DEFAULT_SCHEMA=[dbo] 

However if I try to login using MSSMS with Active Directory - Password authentication I get

Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON' (MIcrosoft SQL Server, Error 18456)

[Update]

In the Connection Properties Tab
I had to overtype with the database name

overtype the database name

1

1 Answers

1
votes

That particular page only shows an example using a SQL login/user, so I can understand why you are confused.

Please read through this page: https://docs.microsoft.com/en-us/sql/t-sql/statements/create-user-transact-sql?view=sql-server-2017

Specifically, you want to create a user using the AS EXTERNAL PROVIDER example. This tells SQL Azure (and SQL DW) to use Azure Active Directory instead of creating a SQL user. Please note that this does not (as of today) work in SQL Server. (SQL Server supports integrated authentication against a local Active Directory, but it just does not currently support the Azure Active Directory service).

Also, there is no specific requirement that you use SSMS to do this step. You can do it within SSMS, SQL Operation Studio, through one of the SQL client drivers in a program you write (or some third party program that can invoke SQL over them), sqlcmd, etc. You don't even need to have the latest SSMS to make things work (though it is recommend to get the best experience against SQL Azure including syntax highlighting).

Please give that a try and see if it gets you unblocked.

Best of Luck!