以编程方式将用户添加到以编程方式创建的数据库 (Azure SQL)

Question

I'm using Azure Management ResourceManager to programmatically create a database on an Azure SQL Server. This works fine. I use:

var azureCredentials = new AzureCredentials(new ServicePrincipalLoginInformation
{
    ClientId = ClientID,
    ClientSecret = ClientSecret,
}, TenantID, AzureEnvironment.AzureGlobalCloud);

var newDB = azure.SqlServers.Databases.Define(DatabaseName)
    .WithExistingSqlServer(ResourceGroupName, SqlServerName, Region.EuropeWest.Name)
    .WithEdition(DatabaseEdition.Standard)
    .WithServiceObjective(ServiceObjectiveName.S1)                    
    .Create();

Now I want to add a login to the master database, and a user based on that login to the created database.
However, I seem to be unable to do this completely programmatically.
I have an app registration that I use to get a token, but when I try to create ac connection with an SqlConnection using the token, I get an error:
Login failed for user '<token-identified principal>'.

According to the Microsoft documentation I first need to add the user to the database, using T-SQL:

CREATE USER [<Azure_AD_principal_name>] FROM EXTERNAL PROVIDER;

But I can't do this programmatically without having a connection to the database first!

Is there no way to do this completely automated??

Cheers, CJ

Answer 1

I got so caught up in app registrations and tokens, I completely forgot that I also have a server admin account for the databaser server.. Stupid me...