Access Azure SQL Database from Azure AppService via Managed Identity on different Subscriptions

Question

Is it possible to access Azure SQL Database on one subscription from Azure AppService hosted on a different subscription via Managed Identity?

I followed the steps below, which has no example on different subscription. https://learn.microsoft.com/en-us/azure/app-service/app-service-web-tutorial-connect-msi#grant-permissions-to-managed-identity

Other links Using Azure managed Identities to access Azure SQL DB https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/tutorial-windows-vm-access-sql

Update

How to reference idenity-name when it is in a different subscription? shown on the link above https://learn.microsoft.com/en-us/azure/app-service/app-service-web-tutorial-connect-msi#grant-permissions-to-managed-identity

CREATE USER [<identity-name>] FROM EXTERNAL PROVIDER;
ALTER ROLE db_datareader ADD MEMBER [<identity-name>];
ALTER ROLE db_datawriter ADD MEMBER [<identity-name>];
ALTER ROLE db_ddladmin ADD MEMBER [<identity-name>];

Have you actually tried it? The name should be unique in that AAD tenant — silent
– silent, Commented Sep 4, 2020 at 15:59

silent · Accepted Answer · 2020-09-04 11:37:59Z

0

As long as both, AppService as well as SQL DB, live in the same AAD tenant then, yes, this should be possible

answered Sep 4, 2020 at 11:37

silent

16.5k8 gold badges61 silver badges114 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Access Azure SQL Database from Azure AppService via Managed Identity on different Subscriptions

1 Answer 1

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related