Forum Discussion

JonathanGibbs's avatar
JonathanGibbs
Copper Contributor
Jan 17, 2024

Create login from Entra ID Security Group rather than individual

This article says I can create a Login in Azure SQL Server from a Microsoft EntraID Security Group. I can, and it works, and it appears in sys.server_principals as type_desc 'EXTERNAL_GROUP' and type...
  • BabatundeDallas's avatar
    Jan 25, 2024

    JonathanGibbs You can create a login in Azure SQL Server from a Microsoft EntraID Security Group.

     

    However, creating a user from the login might not be possible.
    You might get an error message <EntraIDGroupName> is not a valid login or you do not have permission’. This error message is because the login is a group login, not an individual one.

     

    You can try creating individual logins and users for each potential EntraID user you want access to the database.

     

    You can read more at Microsoft Learn.

    https://learn.microsoft.com/en-us/entra/architecture/4-secure-access-groups

    https://learn.microsoft.com/en-us/entra/fundamentals/concept-learn-about-groups

     

    Let me know if this works for you. @ me in replies, or I'll lose your thread!!!  
    Note:
    If this post is helpful, please mark it as the solution to help others find it easily. Also, if my answers contribute to a solution, show your appreciation by giving it a thumbs up

Resources