Skip to content

Commit 3b8c4e3

Browse files
20251118 security overview edit pass (#35824)
Co-authored-by: Pieter Vanhove <pieter.vanhove@microsoft.com>
1 parent 7208fd0 commit 3b8c4e3

7 files changed

Lines changed: 44 additions & 33 deletions

File tree

azure-sql/database/logins-create-manage.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -58,7 +58,7 @@ When a user attempts to connect to a database, they provide a user account and a
5858
- A **login** is an individual account in the `master` database, to which a user account in one or more databases can be linked. With a login, the credential information for the user account is stored with the login.
5959
- A **user account** is an individual account in any database that might be, but doesn't have to be, linked to a login. With a user account that isn't linked to a login, the credential information is stored with the user account.
6060

61-
[**Authorization**](security-overview.md#authorization) to access data and perform various actions are managed using database roles and explicit permissions. Authorization refers to the permissions assigned to a user, and determines what that user is allowed to do. Authorization is controlled by your user account's database [role memberships](/sql/relational-databases/security/authentication-access/database-level-roles) and [object-level permissions](/sql/relational-databases/security/permissions-database-engine). As a best practice, you should grant users the least privileges necessary.
61+
[**Authorization**](security-overview.md#authorization-and-access-management) to access data and perform various actions are managed using database roles and explicit permissions. Authorization refers to the permissions assigned to a user, and determines what that user is allowed to do. Authorization is controlled by your user account's database [role memberships](/sql/relational-databases/security/authentication-access/database-level-roles) and [object-level permissions](/sql/relational-databases/security/permissions-database-engine). As a best practice, you should grant users the least privileges necessary.
6262

6363
## Existing logins and user accounts after creating a new database
6464

76.2 KB
Loading

azure-sql/database/media/security-overview/azure-database-ae.png renamed to azure-sql/database/media/security-overview/always-encrypted.png

File renamed without changes.
-17.2 KB
Binary file not shown.

azure-sql/database/media/security-overview/azure-database-ddm.png renamed to azure-sql/database/media/security-overview/dynamic-data-masking.png

File renamed without changes.

azure-sql/database/media/security-overview/azure-database-rls.png renamed to azure-sql/database/media/security-overview/row-level-security.png

File renamed without changes.

azure-sql/database/security-overview.md

Lines changed: 43 additions & 32 deletions
Large diffs are not rendered by default.

0 commit comments

Comments
 (0)