Azure / azure-powershell

Microsoft Azure PowerShell
Other
4.22k stars 3.83k forks source link

[Feature]: New-AzSqlDatabaseExport auth with Access Token #17704

Open NattyMojo opened 2 years ago

NattyMojo commented 2 years ago

Description of the new feature

Currently the New-AzSqlDatabaseExport cmdlet only allows access through Sql credentials or ADPassword. Proposing the option to authenticate through an Access Token generated with the Get-AzAccessToken cmdlet. This other form of authentication would allow for secure access to the SQL DB Export functionality without having to hand over SQL admin credentials or specific user AD credentials.

This same functionality is being proposed in azure cli 20645.

Something similar can be seen in SqlPackage Export with the /AccessToken parameter. Which would be a great option but is not currently available in the Azure Powershell Runbook 5.1 (from what I've seen).

Proposed implementation details (optional)

No response

ghost commented 2 years ago

Thanks for the feedback! We are routing this to the appropriate team for follow-up. cc @azureSQLGitHub.

Issue Details
### Description of the new feature Currently the New-AzSqlDatabaseExport cmdlet only allows access through Sql credentials or ADPassword. Proposing the option to authenticate through an Access Token generated with the Get-AzAccessToken cmdlet. This other form of authentication would allow for secure access to the SQL DB Export functionality without having to hand over SQL admin credentials or specific user AD credentials. This same functionality is being proposed in azure cli [20645](https://github.com/Azure/azure-cli/issues/20645). Something similar can be seen in SqlPackage Export with the /AccessToken [parameter](https://docs.microsoft.com/en-us/sql/tools/sqlpackage/sqlpackage-export?view=sql-server-ver15#parameters-for-the-export-action). Which would be a great option but is not currently available in the Azure Powershell Runbook 5.1 (from what I've seen). ### Proposed implementation details (optional) _No response_
Author: NattyMojo
Assignees: -
Labels: `SQL`, `feature-request`, `Service Attention`, `customer-reported`
Milestone: -
DanielSpindler83 commented 2 years ago

Is there a way we can track the progress, up vote and get a notification when this is released?

uprightbass360 commented 2 years ago

Has this gotten any traction. I am in the process of building out a backup procedure and would rather implement a scoped token instead of authenticating directly.

jason-swissre commented 2 years ago

We would also be interested in this feature