In azure sql db how to enforce the rule users should only connect using applicationintent=Readonly

Question

For sql server availability groups we enforce the rule “users should only read from DR nodes” by first creating logins and users in the primary node and then dropping /disabling the logins on the primary . Is there a way to do the same for azure sql db? We can tell the users to connect only using applicationIntent=ReadOnly but how do we enforce at least monitor that from sql server side . Any input is appreciated thanks

Answer 1

You can always monitor connections and sessions on the primary. And see in Query Store if ad-hoc reporting queries are running on the primary.

And if you see sessions or queries there that should be using a secondary, go have a chat with the user.