SQL Database

  1. Allow storage account with vnet and behind firewall to be used for SQL's advanced threat protection.

    As described in Microsoft documentation https://docs.microsoft.com/en-us/azure/sql-database/sql-database-auditing#subheading-1 a storage account behind firewall and a storage account with vnet is currently not supported for SQL's advanced threat protection.
    This possess a high security risk where the logs will visible to anyone with access to the subscription, sas uri or storage account key.
    We expect this to be fixed and enhanced so that a storage account with vnet and behind firewall can be used for SQL's advanced threat protection.

    25 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Bugs  ·  Flag idea as inappropriate…  ·  Admin →
  2. Allow SPN's to create AAD Users

    As we follow best practices and fully automate Azure using SPN's while leveraging AAD for users, we wish to create AAD users in SQL DB using our SPN's.

    When attempting to create AAD users in a database using an SPN, we received this error:
    "Principal 'xxxxxx' could not be created. Only connections established with Active Directory accounts can create other Active Directory users."

    We were told by support that "At this time, the statement CREATE USER [] FROM EXTERNAL PROVIDER; is not supported for SPN."

    Request we make this possible...

    21 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  3. Azure SQL final backup before delete

    I see there is a warning and you have to explicitly type 'Yes' to delete the Azure SQL database. However, people still delete the database ignoring the backup retention and pricing tier. It will be very useful if a by-default enabled checkbox that triggers the final backup before the database is being deleted(with no auto retention policy- that means the user will still pay for that backup). Users can choose to unselect the checkbox if the final backup is not required.

    10 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  4. Azure SQL Managed Instance DNS alias

    Just like DNS alias is supported for Azure SQL database https://docs.microsoft.com/en-us/azure/sql-database/dns-alias-overview,
    we need same functionality supported for Azure SQL managed instance, abstraction layer to redirect traffic during upgrades, massive data maintenance etc.

    23 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  5. Support AzureRm powershell sending database/server audit logs to write to Log Analytics

    Azure Automation account still dont fully support Az modules. It is very hard to setup a new Automation account with Az only.

    I have a lot of Runbooks written using AzureRm and would like the RM to be updated to include the log analytics workspace instead of only storage.

    AZ command: (supports Log Analytics)

     Set-AzSqlServerAuditing
    
    Set-AzSqlDatabaseAuditing

    AzureRm Command: (does not support Log Analytics)

      Set-AzureRmSqlServerAuditing
    
    Set-AzureRmSqlDatabaseAuditing

    9 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    4 comments  ·  Flag idea as inappropriate…  ·  Admin →
  6. Allow Recovery Model to be changed to SIMPLE in Azure SQL Database

    According to this article (https://blogs.msdn.microsoft.com/azuresqldbsupport/2018/12/28/lesson-learned-50-adding-pk-led-to-transaction-log-full-error/) the recovery model of a Azure SQL Database cannot be altered from the default option FULL. In a very data intensive setup, this blows up the transaction log -> the LOG IO percentage in portal is at 100% all the time. Allowing the SIMPLE recovery model should improved the performance significantly.

    106 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    under review  ·  3 comments  ·  Flag idea as inappropriate…  ·  Admin →
  7. Enable serverless feature via ARM template

    Currently serverless feature not supported by ARM template. Manually changing to serverless from the portal results in an sku name of GPSGen5_1 (choosing the most basic). If I update my fully-working ARM template with this SKU name (instead of S0) for example, I get an error on deployment reporting:

    "error": {

    "code": "InvalidSkuName",
    
    "message": "Invalid SKU name 'GP_S_Gen5_1'."

    }

    However this is already the value of the sku name on resource JSON export as a result of the change via Portal.

    NOTE: There were other detected changes to the JSON export (from Portal changes), which I also ensured…

    13 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Bugs  ·  Flag idea as inappropriate…  ·  Admin →
  8. Include improved & regressed query plan links in sys.dm_db_tuning_recommendations

    When you enable Automatic Index Tuning, and Azure adds indexes, the portal's validation screen shows a count of the number of improved and regressed queries. However, there's no easy way to tell which queries they were.

    To facilitate that, how about in the "details" JSON column of sys.dmdbtuning_recommendations, you add something to help us join to Query Store or the plan cache to see which queries they were?

    56 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  9. Azure SQL Database serverless manually pause and resume

    It would useful to have the possibility to manually pause and resume a serverless sql database

    18 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    started  ·  2 comments  ·  Flag idea as inappropriate…  ·  Admin →
  10. makta

    Please improve the time zone of Azure SQL Database so that users can change it.

    When migrating to Azure SQL Database, it takes a lot of time to change all the programs of the application.

    59 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  11. Enable elastics jobs to use managed service identity

    SQL Server now supports MSI and yet Elastic Jobs still relies on SQL user credentials. It would be much better to be able to give a job an AD identity that can be managed and can be given rights on certain servers and databases.

    8 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  12. Implement python bindings for azure-sqldb-spark connector

    The azure-sqldb-spark Spark connector (https://github.com/Azure/azure-sqldb-spark) provides support for Spark on Scala, but does not currently provide Python bindings.

    Python-based Spark applications can still connect to MSSQL/Azure SQL databases using a JDBC connection, but this approach does not support bulk-inserts and is therefore quite slow for persisting large Spark dataframes to MSSQL.

    It would be useful if PySpark applications could take advantage of the bulk insert capabilities provided by the azure-sqldb-spark scala package. From the git repo readme: "Comparing to the built-in Spark connector, this connector provides the ability to bulk insert data into SQL databases. It can outperform…

    163 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  13. Schedule time for Azure SQL Data Sync

    Currently you can set the frequency for synchronization but you cannot set the time.

    https://github.com/MicrosoftDocs/azure-docs/issues/40261

    The specific usecase I have is to synchronize data between a staging environment and a production environment every day at midnight. This way content administrators can set up data and see how it looks in production in the staging environment without impacting production and any data changes they would like to keep will get synced to production daily.

    Bonus points if we can just move to a cron schedule like Azure Functions. It would support so many scenarios for scheduling.

    6 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  14. Improving of deleting Azure SQL Database that called from dashboard in Azure portal.

    Created tile to dashboard can delete SQL database from itself.
    It behavior is very dangerous that seems from viewpoint of Fault tolerance. Because ,operator want to remove tile from dashboard Nevertheless Misunderstanding of operator to confuse "remove from dashboard" with "delete" is going to be to delete sql database.

    The biggest problem is that only SQL databases can remove resources from dashboards. And It processing is only confirm dialog "yes" , "no".

    I strongly believe that "delete" menu must be delete from dashboards.

    16 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Bugs  ·  Flag idea as inappropriate…  ·  Admin →
  15. Vulnerability Assessment logs should contain the resource or subscription id inoformation to make it easy to indentify the exact resource

    Vulnerability Assessment logs do not contain the resource or subscription id, just server name and database name.
    Should the resource and subscription Id will be included in the Vulnerability Assessment in the near future ?we want the subscription ID and resource group name in Vulnerability Assessment log to make it easy to identify.

    4 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Bugs  ·  Flag idea as inappropriate…  ·  Admin →
  16. Bring Scalar UDF Inlining to Azure SQL Database

    SQL Server 2019 was released today with the feature Scalar UDF Inlining. This feature is currently not available in Azure SQL database.

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  17. Azure SQL DB DACPAC task in DEvOps does not support AD authentication with a SErvice Principal

    The only way to deploy to Azure SQL DB using the DACPAC task in Azure Devops is to use SQL Login Authentication. Microsoft Integrated authentication does not work despite the options being available (perhaps because it's connecting to Azure SQL DB and not Managed Instance or Enterprise).

    This means I have to add user security groups manually to my Azure SQL DB rather than in a DevOps task.

    9 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  18. Azure SQL Database copy operations shouldn't require write access to the source database

    When performing a database copy operation between two different servers it appears that write access is required to both the destination server and the source database.

    See the following error from the Az CLI:

    $ az sql db copy \

    --resource-group source --server source --name source \
    
    --dest-resource-group dest --dest-server dest --elastic-pool dest --dest-name dest

    ERROR: The client '<client>' with object id '<object id>' has permission to perform action 'Microsoft.Sql/servers/databases/write' on scope '/subscriptions/<subscription>/resourceGroups/dest/providers/Microsoft.Sql/servers/dest/databases/dest'; however, it does not have permission to perform action 'Microsoft.Sql/servers/databases/write' on the linked scope(s) '/subscriptions/<subscription>/resourceGroups/source/providers/Microsoft.Sql/servers/source/databases/source'.

    This isn't ideal in use cases where you're automating the copy of…

    21 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  19. Bug: DDL Triggers are NOT disabled during Bacpac import

    During the import of a Bacpac DDL triggers are not disabled and therefore are fired on each trigger defined DDL operation as they are carried out during the import process.

    An example of this is a trigger firing on ALTER TABLE actions, where the import process is recorded by the trigger in an audit table. However when the contents of the audit table itself is attempted to be imported a duplicate primary key error is thrown as the import process has already written rows to the table.

    As an example:
    Create a DDL trigger using the attached text file on…

    23 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Bugs  ·  Flag idea as inappropriate…  ·  Admin →
  20. Gen4 vCore phased out? => less memory in Gen5

    Gen4 is being phased out.
    Gen4 has 2 GB memory more than Gen5.
    Memory is more important than CPU for a lot of DB's.
    Are there any plans to introduce a vCore with more memory again?

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
← Previous 1 3 4 5 34 35
  • Don't see your idea?

SQL Database

Categories

Feedback and Knowledge Base