Required SQL permissions

Create the database

You need both:

• db_creator server role

• ALTER ANY LOGIN permission

  You are granted this permission with the statement GRANT ALTER ANY LOGIN TO "domain\account" or you are a member of the securityadmin server role.

Upgrade the database

You must have either the db_owner database role or have all of the following database roles:

• db_datareader

• db_datawriter

• db_ddladmin

Create the database

You need either:

• Server admin account

  -OR-

• Microsoft Entra Admin role on the Azure SQL Server

  -OR-

• dbmanager and loginmanager database roles on the master database (for more information, refer to Database-level roles)

  Note: To read more about authentication options for Azure SQL Database, refer Microsoft's article Authorize database access to SQL Database, SQL Managed Instance, and Azure Synapse Analytics.

Upgrade the database

You need either:

• Server admin account

  -OR-

• Microsoft Entra Admin role on the Azure SQL Server

  -OR-

• dbmanager and loginmanager database roles on the master database (for more information, refer to Database-level roles)

  Note: To read more about authentication options for Azure SQL Database, refer Microsoft's article Authorize database access to SQL Database, SQL Managed Instance, and Azure Synapse Analytics.

Create the database

You need both:

• CREATE ANY DATABASE

  You are granted this permission with the statement GRANT CREATE ANY DATABASE TO [<User>]

• ALTER ANY LOGIN

  You are granted this permission with the statement ALTER ANY LOGIN TO [<User>]

Upgrade the database

You must have either the db_owner database role or have all of the following database roles:

• db_datareader

• db_datawriter

• db_ddladmin