Azure Data Studio - Connections to Azure Government

[Guest JoshuaLent]

 

Connections to Azure Government aren't automatically enabled in Azure Data Studio. This article will guide you through the process of enabling connections to Azure Government from Azure Data Studio. 

 

 

 

 

Begin by connecting to your subscription in the Azure Government Portal. Then, navigate to Azure Active Directory > Groups

 

Identify or create a group that will contain the users you wish to provision access for. In this article, we’ll use “MI_Admins”.

 

 

 

 

 

 

In Azure Portal, navigate to the Azure SQL Managed Instance or the server for the Azure SQL DB you wish to grant access to. On the networking page for the SQL Server, add appropriate firewall rules to allow your connection to the database:

 

 

 

 

 

 

Using SQL Server Management Studio or Query Editor from the portal, connect to the database you want to access from Azure Data Studio. Then, create a contained user and add it to an appropriate database role. For example:

 

 

 

 

 

 

In Azure Data Studio navigate to File > Preferences > Settings. Then, navigate to Extensions > Azure (core). Then, check the box for enabling Us Gov Cloud.

 

 

 

 

 

 

Expand the Azure connections blade and click the ‘+’ sign to add your Azure Government Account.

 

 

 

 

 

 

Under Azure (US GOVERNMENT), select the ‘+’ sign, and then select the Azure (US GOVERNMENT) option.

 

 

 

 

 

 

Enter your Azure government subscription address and authenticate to Azure.

 

Click the close button and navigate back to the Connections > Azure blade in Azure Data Studio.

 

Expand the appropriate subscription and find the SQL MI or DB you’re wanting to connect to.

 

 

 

 

 

 

Click the connect icon:

 

 

 

 

 

 

Verify your connection information and then click connect:

 

 

 

 

 

 

You should now also be able to persist the server connection on the Connections > Server Blade:

 

 

 

 

 

 

Under some circumstances, like when working within a secure enclave, it may be necessary to enable the ADAL authentication library and/or Device Code Method authentication. ADAL is a predecessor to MSAL. Device Code Method, provides an alternative token-based authentication where other types of interactive authentication are not possible.

 

 

 

 

 

 

This authentication method will result in the process of navigating to a Microsoft website and providing a user code when creating your connection:

 

 

 

 

 

 

Thanks for reading!

 

Continue reading...