Azure SQL Security: Understanding Access and Authentication (Ep. 2) | Data Exposed

In this episode of Data Exposed Live, Andreas Wolter and Mirek Sztajno (Azure SQL Security Program Managers) guide you through two fundamental areas of securing a SQL Database: Authentication and Access Management. Covering basics and also advanced concepts, this session is meant to help both beginners and experienced users in designing security for their SQL estate.

0:00 Show begins
0:40 Introductions
2:00 Overview
3:20 Azure Active Directory Authentication
10:20 Azure AD authentication with Azure SQL DB
13:46 Demo: Connecting a guest user to Azure SQL using multi-factor authentication
21:50 Role-Based Access Control (RBAC)
27:45 SQL Roles & Permissions
36:40 Demo: Applying least permissions in a scalable manner, using database roles
50:30 Row-Level Security
57:20 What's next

✔️ Resources:
Azure Active Directory:
What is Azure Active Directory?: https://aka.ms/whatisaad
Use Azure Active Directory authentication: https://docs.microsoft.com/en-us/azur...
Configure and manage Azure AD authentication with Azure SQL: https://docs.microsoft.com/en-us/azur...
Azure Active Directory service principal with Azure SQL: https://docs.microsoft.com/en-us/azur...
Tutorial: Create Azure AD users using Azure AD applications: https://docs.microsoft.com/en-us/azur...
Support for Azure AD user creation on behalf of Azure AD Applications for Azure SQL: https://techcommunity.microsoft.com/t...
Directory Readers role in Azure Active Directory for Azure SQL: https://docs.microsoft.com/en-us/azur...
Tutorial: Assign Directory Readers role to an Azure AD group and manage role assignments: https://docs.microsoft.com/en-us/azur...
Using cloud groups to manage role assignments in Azure Active Directory (preview): https://docs.microsoft.com/en-us/azur...
Create Azure AD guest users and set as an Azure AD admin: https://docs.microsoft.com/en-us/azur...
Enhanced support for Azure AD Guest Users for Azure SQL: https://techcommunity.microsoft.com/t...
Azure AD authentication methods: https://docs.microsoft.com/en-us/azur...
Choose the right authentication method for your Azure Active Directory hybrid identity solution: https://docs.microsoft.com/en-us/azur...

Azure RBAC:
What is Azure role-based access control (Azure RBAC)?: https://docs.microsoft.com/en-us/azur...

Permissions, Roles, and Schemas:
Permissions (Database Engine): https://docs.microsoft.com/en-us/sql/...
Security: The Principle of Least Privilege (POLP): https://techcommunity.microsoft.com/t...

Security:
Limiting access to data using Row-Level Security: https://cloudblogs.microsoft.com/sqls...
Row-Level Security: https://docs.microsoft.com/en-us/sql/...
Playbook for addressing common security requirements with Azure SQL Database and Azure SQL Managed Instance: https://aka.ms/AzureSQLDBSecurityPlay...
Security Principles: https://aka.ms/SecurityPrinciplesSQL

📌 Let's connect:
Twitter: Andreas Wolter,   / andreaswolter  
Twitter: Anna Hoffman,   / analyticanna​​  
Twitter: AzureSQL, https://aka.ms/azuresqltw​​

🔴 To watch more episodes in the Azure SQL Security series, click: https://aka.ms/dataexposed-security
To check out even more Data Exposed Live episodes, see our playlist: https://aka.ms/dataexposedlive​​

🔔 Subscribe to our channels for even more SQL tips: https://aka.ms/msazuresqlyt​

#AzureSQLSecurity​ #AzureSQL​ #SQLServer