How to monitor database level firewall rules

%3CLINGO-SUB%20id%3D%22lingo-sub-2263494%22%20slang%3D%22en-US%22%3EHow%20to%20monitor%20database%20level%20firewall%20rules%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2263494%22%20slang%3D%22en-US%22%3E%3CP%3EAs%20documented%20at%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fazure-sql%2Fdatabase%2Ffirewall-configure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EIP%20firewall%20rules%20-%20Azure%20SQL%20Database%20and%20Azure%20Synapse%20Analytics%20%7C%20Microsoft%20Docs%3C%2FA%3E%2C%20Azure%20database-level%20firewall%20rules%20are%20overriding%20server-level%20firewall%20rules.%20Since%20the%20database-level%20firewall%20rules%20can%20be%20created%20by%20a%20user%20that%20is%20given%20a%20contributor%20role%20on%20the%20database%2C%20how%20can%20an%20Azure%20administrator%20monitor%20these%20rules%20and%20be%20fully%20aware%20of%20the%20actual%20effective%20firewall%20rules%20on%20multiple%20Azure%20databases%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Visitor

As documented at IP firewall rules - Azure SQL Database and Azure Synapse Analytics | Microsoft Docs, Azure database-level firewall rules are overriding server-level firewall rules. Since the database-level firewall rules can be created by a user that is given a contributor role on the database, how can an Azure administrator monitor these rules and be fully aware of the actual effective firewall rules on multiple Azure databases?

0 Replies