Authorizing developers on Azure

Hi Roy, 

Assuming your developers can already login to the Azure SQL Server, you have to add them to the database owner role of the application database. To do this, right click the Users node in SQL Server Management Studio and select New User. This will open a new query window with a  SQL template to add a user to the db_owner role:

-- ==================================================
-- Create User as DBO template for Azure SQL Database 
-- ==================================================
-- For login <login_name, sysname, login_name>, create a user in the database
CREATE USER <user_name, sysname, user_name>
	FOR LOGIN <login_name, sysname, login_name>
	WITH DEFAULT_SCHEMA = <default_schema, sysname, dbo>
GO

-- Add user to the database owner role
EXEC sp_addrolemember N'db_owner', N'<user_name, sysname, user_name>'
GO

Tip: Press Ctrl+Shift+M to specify values for the template parameters.

For the users of an application database, you can use the apply rights tasks in IAM. 

Hi Jasper,

Thank you for this information. This works for existing databases. Unfortunately it does not seem to work for creating a new database. It seems that this first step still needs a user with more rights. Probably not on the database (as this still must be generated), but on the server.

Creating an empty database (even through SSMS) requires some sort of superuser kind of rights. After creating an empty database and giving a user the rights through the indicated way (create user and add role member), this user can push updates to the database.

Is there a way that "regular developers” (without the superuser-rights) can also create an empty database?