Pre-installation tasks for Microsoft Azure

If your PI AF SQL Database is hosted on Microsoft Azure, complete the following pre-installation tasks:

1. Determine which authentication method you will use to connect to Azure SQL Database.

   The setup offers the following options:

   • Active Directory Managed Identity

   Note: Verify which type of managed identity you will be using: system or user assigned. Additionally, the system or user assigned managed identity option can be used only if you are using an Azure hosted virtual machine.

   • Active Directory Integrated

   • Active Directory Service Principal

   For more information on the Microsoft Entra authentication options listed please read Authenticate with Microsoft Entra ID in sqlcmd.

2. Make sure that the account used to authenticate to the SQL Server has db_owner privileges on the PI AF Database in order to be able to run the scripts.We recommend you revoke the privileges after installation since the user running the PI SQL Data Access Server RTQP only requires the newly created db_AFQueryEngineRole. In order to grant the db_owner role, navigate to the portal and run the following query:

   ALTER ROLE db_owner ADD MEMBER <account_used_in_the_setup>