azure云数据库_使用Azure Active Directory和Azure SQL数据库

azure云数据库

介绍 (Introduction)

By default, when someone creates an Azure SQL Server, an Administrator with SQL Authentication is created by default. However, for administrative purposes, it is a best practice to use Azure Active Directory.

默认情况下，当有人创建Azure SQL Server时，默认情况下会创建具有SQL身份验证的管理员。 但是，出于管理目的，最佳实践是使用Azure Active Directory。

Azure Active Directory (AD) can be used to access to several Azure resources like Azure SQL Database, Azure SQL Data Warehouse, Office 365, Salesforce, Dropbox, Adobe Create Cloud, ArcGis and more. Azure Active Directory is a cloud directory and an identity management service.

Azure Active Directory（AD）可用于访问多个Azure资源，例如Azure SQL数据库，Azure SQL数据仓库，Office 365，Salesforce，Dropbox，Adobe Create Cloud，ArcGis等。 Azure Active Directory是一个云目录和身份管理服务。

Having different credentials for each application is a chaos. That is why using Azure for Azure SQL Database or other Azure applications is necessary. You can centralize the authentication management. It also provides stronger security to your Azure SQL Databases.

每个应用程序具有不同的凭据是一个混乱。 这就是为什么必须将Azure用于Azure SQL数据库或其他Azure应用程序。 您可以集中进行身份验证管理。 它还为Azure SQL数据库提供了更强的安全性。

目标观众 (Target audience)

• If you do not have any experience in AD on-premises or Azure AD, this article is for you.
  如果您没有本地AD或Azure AD的任何经验，那么本文适合您。
• If you have experience in AD on-premises and you do not have experience in Azure AD, this article is also for you!
  如果您具有本地AD的经验，并且没有Azure AD的经验，那么本文也很适合您！

总览 (Overview)

In this new article, we will learn how to:

在这篇新文章中，我们将学习如何：

• Create an Azure Active Directory user
  创建一个Azure Active Directory用户
• Create an Azure Active Directory group and assign the user the group
  创建一个Azure Active Directory组并为用户分配该组
• How to add an Azure Active Directory user/group as an Azure SQL Administrator
  如何将Azure Active Directory用户/组添加为Azure SQL管理员
• How to Add Azure Active Directory users to Azure SQL Database
  如何将Azure Active Directory用户添加到Azure SQL数据库

要求 (Requirements)

1. A subscription to Azure 订阅Azure
2. Working with Visual Studio and SQL Azure databases) 使用Visual Studio和SQL Azure数据库来创建一个）

入门 (Getting started)

By default, an Azure AD directory is already created by default. We will first create the user and then add it to a group. Finally, we will add it to Azure SQL Database.

默认情况下，默认情况下已创建一个Azure AD目录。 我们将首先创建用户，然后将其添加到组中。 最后，我们将其添加到Azure SQL数据库。

创建一个Azure Active Directory用户 (Create an Azure Active Directory User)

In the Azure Portal, right click on the account and select your directory:

在Azure门户中，右键单击该帐户，然后选择您的目录：

The directory stores information like users and groups in Azure. In this example, the directory is dani671hotmail.onmicrosoft.com.

该目录在Azure中存储诸如用户和组之类的信息。 在此的示例目录是dani671hot