Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Administrator (SQL) login created, even when property not included #13691

Open
kwc-dev opened this issue Jan 8, 2024 · 1 comment
Open

Administrator (SQL) login created, even when property not included #13691

kwc-dev opened this issue Jan 8, 2024 · 1 comment

Comments

@kwc-dev
Copy link

kwc-dev commented Jan 8, 2024

SQL server with Azure AD-only authentication

Issue Details

Looks like that the property administratorLogin (in the properties block) is included automatically behind the scenes even though when not specifying it.

Why is this included? The value is set to CloudSA********. Is this mandatory? Possible to exclude or remove it?
Or is it even possible to delete/disable it?

Repro steps

  1. Deploy resource with this template
  2. Go to Azure and check the JSON/template of this resource (automation -> export template)
  3. The property administratorLogin (which is not included) can be seen
@mrajess
Copy link
Contributor

mrajess commented Mar 4, 2024

https://learn.microsoft.com/en-us/azure/azure-sql/database/authentication-aad-configure?view=azuresql&tabs=azure-powershell#microsoft-entra-admin-with-a-server-in-sql-database

"Each logical server in Azure (which hosts SQL Database or Azure Synapse) starts with a single server administrator account that is the administrator of the entire server."

https://learn.microsoft.com/en-us/azure/azure-sql/database/authentication-azure-ad-only-authentication?view=azuresql&tabs=azure-cli

"SQL authentication is disabled when enabling Microsoft Entra-only authentication in the Azure SQL environment, including connections from SQL server administrators, logins, and users. Only users using Microsoft Entra authentication are authorized to connect to the server or database."

I believe this is how Azure SQL Server is intended to function. If you were to try and login with SQL auth it should fail. This is not an issue with the template itself. I believe this issue should be closed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants