Granting Access to Similar Name Applications in Azure SQL Database / Synapse

Problem Statement :

Is it possible to grant applications having similar name in Azure AD access within Azure SQL Database / Synapse

Prerequisites :

  1. Azure SQL Database / Synapse

Solution :

Scenario

A) Duplicate Application Names (Service Principals)

  1. When we try to grant access to an Application having similar name in Azure AD within an Azure SQL database, we get the below error :

2. So to provide access to the Service Principal having Application ID starting with b7acc97 , one way would be to rename the Display name of either of the application ; making their individual names unique.

Rename Display Name process:

3. Click on Save.

4. Post that try providing the App access on the database with the new name

B) Duplicate Application Names (Managed Identity)

  1. When we try to grant access to a Managed Identity having similar name in Azure AD within an Azure SQL database, we get the below error :

2. Unlike Service Principals, we cannot update the display name of Azure Offerings (Managed Identity). So one way would be to either create the Azure Offering with another name or Create an Azure AD Security Group.

Login to the below URL to create a new Azure AD Group : https://portal.azure.com/#view/Microsoft_AAD_IAM/AddGroupBlade

3. Add the Managed Identity that needs to be given access within Azure SQL database in the Azure AD Group

4. Post that try providing the Azure AD Group access on the database.

Note : Unlike Service Principals / managed Identities which can have similar names, Azure AD group names are always unique.

Published by Nandan Hegde

Microsoft Data MVP |Microsoft Data platform Architect | Blogger | MSFT Community Champion I am a MSFT Data Platform MVP and Business Intelligence and Data Warehouse professional working within the Microsoft data platform eco-system which includes Azure Synapse Analytics ,Azure Data Factory ,Azure SQL Database and Power BI. To help people keep up with this ever-changing landscape, I frequently posts on LinkedIn, Twitter and to his blog on https://datasharkx.wordpress.com. LinkedIn Profile : www.linkedin.com/in/nandan-hegde-4a195a66 GitHUB Profile : https://github.com/NandanHegde15 Twitter Profile : @nandan_hegde15 MSFT MVP Profile : https://mvp.microsoft.com/en-US/MVP/profile/8977819f-95fb-ed11-8f6d-000d3a560942

Leave a comment

Design a site like this with WordPress.com
Get started