SQL Server – How to Add an AzureAD User for Windows Authentication

azure-activedirectorysql serverwindows-authentication

When users are logging in to a Windows 10 desktop with an Azure Active Directory account how do I add them as a user to SQL Server? Using the Search dialog from the Add Login dialog doesn't seem to find them using 'AzureAD\FirstnameLastname' or 'first.last@thedomain.com' format.

Best Answer

I couldn't find any users through the UI but I was able to add a login like this:

create login [AzureAD\FirstLast] from windows;

Related Solutions

Windows – How to give file permissions to AzureAD user on windows 10

Thanks to Arni on this thread for the answer:

You can try the following command line. After adding an ACL entry, the Security dialog will display the user and you can change the permissions there.

CACLS "C:\YourPath" /T /E /G AzureAD\FirstLast:C

Windows 10 NTFS permissions for Azure AD account

Newer versions show the actual domain name, but the same issue still exists. You can use Powershell to set the permissions.

    $dir = get-item -Path 'C:\users\jshelby\Desktop\testdir\'    
    $acl = $dir.GetAccessControl('Access')
    $username = 'domain\username'
    $AccessRights = New-Object System.Security.AccessControl.FileSystemAccessRule($Username,'Modify','ContainerInherit,ObjectInherit','None','Allow')
    $Acl.SetAccessRule($AccessRights)
    Set-Acl -path $Path -AclObject $Acl

Best Answer

Related Solutions

Windows – How to give file permissions to AzureAD user on windows 10

Windows 10 NTFS permissions for Azure AD account

Related Question