Use Azure Active Directory (AD) authentication in DPA to monitor Azure SQL Managed Instances

To use AD authentication in DPA to monitor one or more ASMIs, see the following section.

Note: LDAP authentication using the following steps will not work if the Azure SQL Managed Instance also has multi-factor authentication turned on. This is a known limitation. For more information, see:

• https://docs.microsoft.com/en-us/azure/multi-factor-authentication/multi-factor-authentication (© 2021 Microsoft, available at https://docs.microsoft.com, obtained on November 23, 2021)
• https://docs.microsoft.com/en-us/azure/multi-factor-authentication/multi-factor-authentication-get-started-server (© 2021 Microsoft, available at https://docs.microsoft.com, obtained on November 23, 2021)

1. Add the Active Directory admin to the Managed. See this guide from Microsoft (© 2021 Microsoft, available at https://docs.microsoft.com, obtained on November 23, 2021) for more information.
2. Connect to the Azure SQL Managed Instance with an SQL Server account (not Azure AD) and execute the script below. Connecting with SQL Server account is just temporary limitation until Azure AD server principals become GA – see this tutorial from Microsoft (© 2021 Microsoft, available at https://docs.microsoft.com, obtained on November 23, 2021) for any updates.

CREATE LOGIN [activeDirectoryUser@*.onmicrosoft.com] FROM EXTERNAL PROVIDER;
ALTER SERVER ROLE sysadmin ADD member [activeDirectoryUser@*.onmicrosoft.com];

-- Scripts are not supported under any SolarWinds support program or service.
-- Scripts are provided AS IS without warranty of any kind. SolarWinds further
-- disclaims all warranties including, without limitation, any implied warranties
-- of merchantability or of fitness for a particular purpose. The risk arising
-- out of the use or performance of the scripts and documentation stays with you.
-- In no event shall SolarWinds or anyone else involved in the creation,
-- production, or delivery of the scripts be liable for any damages whatsoever
-- (including, without limitation, damages for loss of business profits, business
-- interruption, loss of business information, or other pecuniary loss) arising
-- out of the use of or inability to use the scripts or documentation.

3. In DPA, run the Register Instance wizard.
4. When entering the connection information, choose Azure Active Directory from the Authentication method dropdown.
5. Enter the Active Directory credentials.
6. Complete the wizard.