Administrator Guide

9.9
- 9.9.4
- 9.9.3
- 9.9.2
- 9.9.1
- 9.8.4
- 9.8.3
- 9.8.2
- 9.8.1
- 9.8.0

Back Next

Active Directory Authentication-Based User as Administrator

CREATE USER <Azure_Active_Directory_DDM_Admin> FROM EXTERNAL PROVIDER;

ALTER ROLE db_datareader ADD MEMBER <Azure_Active_Directory_DDM_Admin>;

GRANT VIEW DATABASE STATE TO <Azure_Active_Directory_DDM_Admin>

Additional Privileges for SELECT * Statements

If your Dynamic Data Masking security rules need to support column masking on SELECT * statements, you must also run the following command:

GRANT CONTROL TO <Azure_Active_Directory_DDM_Admin>

Alternatively, you can run the following commands:

GRANT ALTER ANY USER TO <Azure_Active_Directory_DDM_Admin>

GRANT IMPERSONATE ON USER :: <Azure_Active_Directory_DDM_Client> TO <Azure_Active_Directory_DDM_Admin>

If you have both Microsoft SQL Server authentication-based users and Active Directory authentication-based users, then use the Active Directory user as the Dynamic Data Masking administrator.

Microsoft Azure SQL Database Dynamic Data Masking Administrator Required Privileges

Rename Saved Search

Table of Contents

Administrator Guide

Administrator Guide

Active Directory Authentication-Based User as Administrator

Active Directory Authentication-Based User as Administrator

Additional Privileges for SELECT * Statements