question

AJ-AJ avatar image
0 Votes"
AJ-AJ asked OuryBa-MSFT answered

SQL Agent & Users Logins scenario for Azure SQL Migration

Hi there,

I have a quick question. I work for a large organization. However they havent moved to Azure.

My question is i have a SSO web application which has around 5000 users. The webapp has SQL Db as backend. The existing setup is 5k users belong to an active directory group granted access via the SQL DB. Now if I migrate this DB to Azure SQL DB (managed) i'm informed there are hicups.


  • Azure SQL (database.net) does not have SQL Agent?


  • Should all these 5000+ windows login users need new Azure Active directory to authenticate and use the web app (assuming web app migrates to azure in near future)?

  • The above issue has dampened the move to azure. Is that something we are missing? I thought if i just point the (either on prem or cloud) web traffic to azure db everything will work fine. How are users managed when a org tries to test or move to azure. There are nighly process run via SQL Agent.

Thanks





sql-server-generalazure-sql-database
5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

2 Answers

AmeliaGu-msft avatar image
0 Votes"
AmeliaGu-msft answered

Hi AJ-AJ,

Azure SQL (database.net) does not have SQL Agent?

Yes. SQL Agent jobs are not directly supported in Azure SQL Database and need to be deployed to elastic database jobs (preview).

Should all these 5000+ windows login users need new Azure Active directory to authenticate and use the web app (assuming web app migrates to azure in near future)?

We cannot migrate the Active Directory Users and Groups to Azure SQL Database. You can use Azure Active Directory authentication instead.
Please refer to this doc which might help.

Best Regards,
Amelia

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

OuryBa-MSFT avatar image
0 Votes"
OuryBa-MSFT answered

Hi @AJ-AJ In Addition to what @AmeliaGu-msft mentioned above.

This is only available for SQL MI and not SQL DB.
All local windows users will be required to be migrated to Azure AD to use Azure SQL managed databases.

We recently announced support for Windows authentication for Azure AD users in Azure SQL Managed Instance (https://techcommunity.microsoft.com/t5/azure-sql-blog/make-your-azure-sql-managed-instance-passwordless/ba-p/2908166). However, this is a SSO protocol for Azure AD and will still need users to be migrated to Azure AD from local on-premises AD.

Regards,
Oury

5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.