azure-postgres

النتيجة المتوقعة:

I can help you set up Microsoft Entra ID authentication for Azure PostgreSQL. Here are the steps:

1. Set Entra ID admin on your server:
az postgres flexible-server ad-admin create \
--server-name YOUR_SERVER \
--resource-group YOUR_RG \
--display-name YOUR_ADMIN \
--object-id ADMIN_OBJECT_ID

2. Create database users from Entra identities:
SELECT * FROM pgaadauth_create_principal('user@domain.com', false, false);

Would you like me to help with any specific step?

النتيجة المتوقعة:

To configure managed identity access:

1. Enable managed identity on your Azure app service:
az webapp identity assign --name APP_NAME --resource-group RG

2. Create a database role for the managed identity:
SELECT * FROM pgaadauth_create_principal_with_oid(
'app-name',
'MANAGED-IDENTITY-OBJECT-ID',
'service',
false,
false
);

3. Grant database permissions:
GRANT CONNECT ON DATABASE yourdb TO "app-name";
GRANT USAGE ON SCHEMA public TO "app-name";
GRANT SELECT ON ALL TABLES IN SCHEMA public TO "app-name";