Exam DP-300 topic 6 question 58 discussion

Actual exam question from Microsoft's DP-300

Question #: 58
Topic #: 6

SIMULATION
-

You need to provide a user named user2-12345678 with the ability to back up and restore databases and change the compute setting of the databases located on a server named sql12345678. User2-12345678 must be prevented from connecting to the databases and modifying database server settings. The solution must minimize administrative effort.

To complete this task, sign in to the virtual machine. You may need to use SQL Server Management Studio and the Azure portal.

Show Suggested Answer

Suggested Answer:

by pjfunner at May 31, 2024, 4:57 a.m.

Comments

Submit Cancel

voodoo_sh

7 months, 1 week ago

-------------- SQL Server use master grant alter any database to [user2] use [db_name] -- in each DB on a server create user [user2] for login [user2] deny connect to [user2] alter role db_backupoperator add member [user2] BUT - on SQL Server, you can't change compute power for each database individually -------------- Azure SQL DB (in each DB on a logical server) create user [user2] for login [user2] deny connect to [user2] grant alter on database::[db_name] to [user2] alter role db_backupoperator add member [user2] BUT - on Azure SQL DB you can't run T-SQL BACKUP statements So, SQL DB Contributor role on Azure portal seems to be the only solution. It lets you manage SQL databases, but not access to them. Also, you can't manage their security-related policies or their parent SQL servers.

upvoted 1 times

...

dorwai

10 months ago

I believe it would be Azure SQL Server Contributor as we need to be able to restore databases? Or is Azure SQL DB Contributor enough?

upvoted 1 times

...

st1a

11 months ago

just need to add the azure rbac sql db contributor role. Can manage, but not access them.

upvoted 1 times

...