0

I was able to add Azure Active Directory Users to Azure Sql server. My question is not related in including or removing an Azure AD user, but its existence after the user ceases himself/herself.

My concern here is, will Azure SQL automatically remove the user from the DB and its grants or will the user be disabled?

Thank You,

hiFI
  • 179
  • 1
  • 7

1 Answers1

1

I just tested this out in my Azure tenant.

  1. Created a new Azure AD user
  2. Added the test user to my Azure SQL DB.
  3. Logged in as the test user and verified access.
  4. Deleted the test user from Azure AD.
  5. Confirmed: Azure SQL does not automatically remove the user from the DB.

Moreover this user retained access to the db for quite a while after the user record was deleted... I did a db rename to disconnect the users from the db and then tried to log in again and was denied.

You might be better off managing access to the database using Azure AD groups instead of adding individual users.

nsb53
  • 176
  • 1
  • 4