Merge pull request #36505 from MicrosoftDocs/main

Auto Publish – main to live - 2026-01-28 18:30 UTC

Author: learn-build-service-prod[bot]

azure-sql/database/authentication-azure-ad-user-assigned-managed-identity-create-server.md

@@ -5,7 +5,7 @@ description: This article guides you through creating an Azure SQL logical serve
 author: VanMSFT
 ms.author: vanto
 ms.reviewer: vanto, mathoma
-ms.date: 08/25/2025
+ms.date: 01/23/2026
 ms.service: azure-sql-database
 ms.subservice: security
 ms.topic: how-to
@@ -62,6 +62,8 @@ The following steps outline the process of creating a new Azure SQL Database log
    - **Password**: Enter a password that meets the password requirements, and enter it again in the **Confirm password** field.
    - **Location**: Select a location from the dropdown list
 
+   [!INCLUDE [server-admin-login-security-note](../includes/server-admin-login-security-note.md)]
+
 1. Select **Next: Networking** at the bottom of the page.
 
 1. On the **Networking** tab, for **Connectivity method**, select **Public endpoint**.
@@ -342,7 +344,10 @@ To get your user-assigned managed identity **Resource ID**, search for **Managed
         },
         "AdminLogin": {
             "minLength": 1,
-            "type": "String"
+            "type": "String",
+            "metadata": {
+                "description": "Server admin login name."
+            }
         },
         "AdminLoginPassword": {
             "type": "SecureString"

azure-sql/database/connect-query-java.md

@@ -4,7 +4,7 @@ description: Learn how to use Java and JDBC with an Azure SQL Database.
 author: jdubois
 ms.author: judubois
 ms.reviewer: mathoma
-ms.date: 06/13/2025
+ms.date: 01/23/2026
 ms.service: azure-sql-database
 ms.subservice: development
 ms.topic: quickstart
@@ -81,7 +81,9 @@ az sql server create \
     | jq
 ```
 
-This command creates the logical server for your database. 
+This command creates the logical server for your database.
+
+[!INCLUDE [server-admin-login-security-note](../includes/server-admin-login-security-note.md)] 
 
 ### Configure a firewall rule for your server
 

azure-sql/database/elastic-jobs-powershell-create.md

@@ -4,7 +4,7 @@ description: Learn how to create an elastic job agent and run scripts across man
 author: WilliamDAssafMSFT
 ms.author: wiassaf
 ms.reviewer: srinia, mathoma
-ms.date: 04/03/2024
+ms.date: 01/23/2026
 ms.service: azure-sql-database
 ms.subservice: elastic-jobs
 ms.topic: tutorial
@@ -64,6 +64,8 @@ Creating an elastic job agent requires a database (S1 or higher) for use as the
 
 The following script creates a new resource group, server, and database for use as the elastic job database. The second script creates a second server with two blank databases to execute jobs against.
 
+[!INCLUDE [server-admin-login-security-note](../includes/server-admin-login-security-note.md)]
+
 Elastic jobs have no specific naming requirements so you can use whatever naming conventions you want, as long as they conform to any [Azure requirements](/azure/architecture/best-practices/resource-naming). If you already have created a blank database to server as the elastic job database, skip to [Create the elastic job agent](#create-the-elastic-job-agent).
 
 Configuring a firewall rule with `New-AzSqlServerFirewallRule` is unnecessary when using elastic jobs private endpoint.
@@ -124,6 +126,9 @@ $jobDatabase
 Write-Output "Creating target server..."
 $targetServerName = Read-Host "Please enter a target server name"
 $targetServerName = $targetServerName + "-" + [guid]::NewGuid()
+```
+
+```powershell
 $parameters = @{
     ResourceGroupName= $resourceGroupName
     Location= $location 

azure-sql/database/hyperscale-database-create-quickstart.md

@@ -4,7 +4,7 @@ description: Create a Hyperscale database in Azure SQL Database using the Azure
 author: WilliamDAssafMSFT
 ms.author: wiassaf
 ms.reviewer: mathoma
-ms.date: 08/25/2025
+ms.date: 01/23/2026
 ms.service: azure-sql-database
 ms.subservice: deployment-configuration
 ms.topic: quickstart
@@ -54,6 +54,8 @@ To create a single database in the Azure portal:
    - **Password**: Enter a password that meets requirements, and enter it again in the **Confirm password** field.
    - **Location**: Select a location from the dropdown list.
 
+   [!INCLUDE [server-admin-login-security-note](../includes/server-admin-login-security-note.md)]
+
    Select **OK**.
 
 1. Under **Compute + storage**, select **Configure database**.
@@ -121,6 +123,8 @@ endIp=0.0.0.0
 echo "Using resource group $resourceGroupName with login: $login, password: $password..."
 ```
 
+[!INCLUDE [server-admin-login-security-note](../includes/server-admin-login-security-note.md)]
+
 ### Create a resource group
 
 Create a resource group with the [az group create](/cli/azure/group) command. An Azure resource group is a logical container into which Azure resources are deployed and managed. The following example creates a resource group in the location specified for the `location` parameter in the prior step:
@@ -207,6 +211,8 @@ Before running the sample code, change the `location` as appropriate for your en
    Write-host "Password is" $password
 ```
 
+[!INCLUDE [server-admin-login-security-note](../includes/server-admin-login-security-note.md)]
+
 ### Create resource group
 
 Create an Azure resource group with [New-AzResourceGroup](/powershell/module/az.resources/new-azresourcegroup). A resource group is a logical container into which Azure resources are deployed and managed.

azure-sql/database/logical-servers.md

@@ -4,7 +4,7 @@ description: Learn about logical servers used by Azure SQL Database and Azure Sy
 author: WilliamDAssafMSFT
 ms.author: wiassaf
 ms.reviewer: mathoma
-ms.date: 03/25/2025
+ms.date: 01/23/2026
 ms.service: azure-sql-database
 ms.subservice: service-overview
 ms.topic: concept-article
@@ -58,6 +58,8 @@ You can create the resource group for a logical server ahead of time or while cr
 
 To create a blank logical server (without a database, elastic pool, or dedicated SQL pool) using the [Azure portal](https://portal.azure.com), navigate to a blank SQL server (**logical SQL server**) form.
 
+[!INCLUDE [server-admin-login-security-note](../includes/server-admin-login-security-note.md)]
+
 ### Create a blank or sample database in Azure SQL Database
 
 To create a database in SQL Database using the [Azure portal](https://portal.azure.com), navigate to create a new **SQL Database** and provide the requested information. You can create the resource group and server ahead of time or while creating the database itself. You can create a blank database or create a sample database based on `AdventureWorksLT`.
@@ -95,13 +97,10 @@ For example, to configure a firewall rule, follow these steps:
 
 You can configure your database using Azure PowerShell. 
 
-[!INCLUDE [updated-for-az](../includes/updated-for-az.md)]
-
-> [!IMPORTANT]
-> The PowerShell Azure Resource Manager (AzureRM) module was deprecated on February 29, 2024. All future development should use the Az.Sql module. Users are advised to migrate from AzureRM to the Az PowerShell module to ensure continued support and updates. The AzureRM module is no longer maintained or supported. The arguments for the commands in the Az PowerShell module and in the AzureRM modules are substantially identical. For more about their compatibility, see [Introducing the new Az PowerShell module](/powershell/azure/new-azureps-module-az).
-
 To create and manage servers, databases, and firewalls with Azure PowerShell, use the following PowerShell cmdlets. If you need to install or upgrade PowerShell, see [Install Azure PowerShell module](/powershell/azure/install-az-ps). For creating and managing elastic pools, see [Elastic pools](elastic-pool-overview.md).
 
+[!INCLUDE [server-admin-login-security-note](../includes/server-admin-login-security-note.md)]
+
 | Cmdlet | Description |
 | --- | --- |
 |[New-AzSqlDatabase](/powershell/module/az.sql/new-azsqldatabase)|Creates a database |
@@ -127,6 +126,8 @@ To create and manage servers, databases, and firewalls with Azure PowerShell, us
 
 To create and manage servers, databases, and firewalls with the [Azure CLI](/cli/azure), use the following [Azure CLI SQL Database](/cli/azure/sql/db) commands. Use the [Cloud Shell](/azure/cloud-shell/overview) to run the CLI in your browser, or [install](/cli/azure/install-azure-cli) it on macOS, Linux, or Windows. For creating and managing elastic pools, see [Elastic pools](elastic-pool-overview.md).
 
+[!INCLUDE [server-admin-login-security-note](../includes/server-admin-login-security-note.md)]
+
 | Cmdlet | Description |
 | --- | --- |
 |[az sql db create](/cli/azure/sql/db#az-sql-db-create) |Creates a database|

azure-sql/database/logins-create-manage.md

@@ -5,7 +5,7 @@ description: Learn about how Azure SQL Database, SQL Managed Instance, and Azure
 author: VanMSFT
 ms.author: vanto
 ms.reviewer: wiassaf, mathoma
-ms.date: 06/30/2025
+ms.date: 01/23/2026
 ms.service: azure-sql
 ms.subservice: security
 ms.topic: concept-article
@@ -62,11 +62,13 @@ When a user attempts to connect to a database, they provide a user account and a
 
 ## Existing logins and user accounts after creating a new database
 
-When you first deploy Azure SQL, you can specify a login name and a password for a special type of administrative login, the **Server admin**. The following configuration of logins and users in the `master` and user databases occurs during deployment:
+When you first deploy an Azure SQL resource, you can specify a login name and a password for a special type of administrative login, the **Server admin**. The following configuration of logins and users in the `master` and user databases occurs during deployment:
+
+[!INCLUDE [server-admin-login-security-note](../includes/server-admin-login-security-note.md)]
 
 - A SQL login with administrative privileges is created using the login name you specified. A [login](/sql/relational-databases/security/authentication-access/principals-database-engine#sa-login) is an individual account for logging in to SQL Database, SQL Managed Instance, and Azure Synapse.
 - This login is granted full administrative permissions on all databases as a [server-level principal](/sql/relational-databases/security/authentication-access/principals-database-engine). The login has all available permissions and can't be limited. In a SQL Managed Instance, this login is added to the [sysadmin fixed server role](/sql/relational-databases/security/authentication-access/server-level-roles) (this role doesn't exist in Azure SQL Database).
-- When this account signs into a database, they're matched to the special user account `dbo` ([user account](/sql/relational-databases/security/authentication-access/getting-started-with-database-engine-permissions#database-users), which exists in each user database. The [dbo](/sql/relational-databases/security/authentication-access/principals-database-engine) user has all database permissions in the database and is member of the `db_owner` fixed database role. Additional fixed database roles are discussed later in this article.
+- When this account signs into a database, they're matched to the special user account `dbo` ([user account](/sql/relational-databases/security/authentication-access/getting-started-with-database-engine-permissions#database-users)), which exists in each user database. The [dbo](/sql/relational-databases/security/authentication-access/principals-database-engine) user has all database permissions in the database and is member of the `db_owner` fixed database role. Additional fixed database roles are discussed later in this article.
 
 To identify the **Server admin** account, open the Azure portal, and navigate to the **Properties** tab of your logical server or managed instance:
 

azure-sql/database/scripts/copy-database-to-new-server-cli.md

@@ -4,7 +4,7 @@ description: Use this Azure CLI example script to copy a database in Azure SQL D
 author: WilliamDAssafMSFT
 ms.author: wiassaf
 ms.reviewer: mathoma
-ms.date: 06/10/2025
+ms.date: 01/23/2026
 ms.service: azure-sql-database
 ms.subservice: data-movement
 ms.topic: sample
@@ -29,6 +29,8 @@ This Azure CLI script example creates a copy of an existing database in a new Az
 
 ### Run the script
 
+[!INCLUDE [server-admin-login-security-note](../../includes/server-admin-login-security-note.md)]
+
 :::code language="azurecli" source="~/../azure_cli_scripts/sql-database/copy-database-to-new-server/copy-database-to-new-server.sh" id="FullScript":::
 
 ## Clean up resources

azure-sql/database/security-overview.md

@@ -5,7 +5,7 @@ description: Learn about security in Azure SQL Database and Azure SQL Managed In
 author: WilliamDAssafMSFT
 ms.author: wiassaf
 ms.reviewer: jaszymas, vanto, emlisa, mathoma, maghan
-ms.date: 12/01/2025
+ms.date: 01/23/2026
 ms.service: azure-sql
 ms.subservice: security
 ms.topic: concept-article
@@ -72,6 +72,8 @@ Authentication is the process of proving the user is who they claim to be. Azure
 
     SQL authentication refers to the authentication of a user when connecting to Azure SQL Database or Azure SQL Managed Instance by using a username and password. You must specify a **server admin** login with a username and password when creating the server. Using these credentials, a **server admin** can authenticate to any database on that server or instance as the database owner. After that, the server admin can create other SQL logins and users, which enable users to connect by using a username and password.
 
+    [!INCLUDE [server-admin-login-security-note](../includes/server-admin-login-security-note.md)]
+
 ## Authorization and access management
 
 Authorization refers to controlling access to management of servers and databases, and to data, resources, and commands within a database. You assign permissions to a user within a database in Azure SQL Database or Azure SQL Managed Instance. Your portal user account's role assignments control managing databases and servers within Azure. For more information, see [Azure role-based access control in the Azure portal](/azure/role-based-access-control/overview).

azure-sql/database/single-database-create-arm-template-quickstart.md

@@ -4,7 +4,7 @@ description: Create a single database in Azure SQL Database using an Azure Resou
 author: WilliamDAssafMSFT
 ms.author: wiassaf
 ms.reviewer: mathoma
-ms.date: 09/17/2024
+ms.date: 01/23/2026
 ms.service: azure-sql-database
 ms.subservice: deployment-configuration
 ms.topic: quickstart
@@ -69,6 +69,8 @@ New-AzResourceGroupDeployment -ResourceGroupName $resourceGroupName -TemplateUri
 Read-Host -Prompt "Press [ENTER] to continue ..."
 ```
 
+[!INCLUDE [server-admin-login-security-note](../includes/server-admin-login-security-note.md)]
+
 ## Validate the deployment
 
 To query the database, see [Query the database](single-database-create-quickstart.md#query-the-database).

azure-sql/database/single-database-create-bicep-quickstart.md

@@ -4,7 +4,7 @@ description: Create a single database in Azure SQL Database using Bicep.
 author: dimitri-furman
 ms.author: dfurman
 ms.reviewer: mathoma
-ms.date: 09/17/2024
+ms.date: 01/23/2026
 ms.service: azure-sql-database
 ms.subservice: deployment-configuration
 ms.topic: quickstart
@@ -36,6 +36,8 @@ If you don't have an Azure subscription, [create a free account](https://azure.m
 
 A single database has a defined set of compute, memory, IO, and storage resources using one of two [purchasing models](purchasing-models.md). When you create a single database, you also define a [server](logical-servers.md) to manage it and place it within [Azure resource group](/azure/active-directory-b2c/overview) in a specified region.
 
+[!INCLUDE [server-admin-login-security-note](../includes/server-admin-login-security-note.md)]
+
 The Bicep file used in this quickstart is from [Azure Quickstart Templates](https://azure.microsoft.com/resources/templates/sql-database/).
 
 :::code language="bicep" source="~/../quickstart-templates/quickstarts/microsoft.sql/sql-database/main.bicep":::
@@ -69,6 +71,7 @@ The following resources are defined in the Bicep file:
 > [!NOTE]
 > Replace **\<admin-login\>** with the administrator username of the SQL logical server. You'll be prompted to enter **administratorLoginPassword**.
 
+
   When the deployment finishes, you should see a message indicating the deployment succeeded.
 
 ## Review deployed resources