Include precisely what we deploy on the customer's sql server

[applefacts]

See example for the ARC extension we list precisely what roles and permissions we grant. We should have something similar to the defender for sql extension. (https://learn.microsoft.com/en-us/sql/relational-databases/security/authentication-access/server-level-roles?view=sql-server-ver16#roles-specific-to-sql-server-enabled-by-azure-arc)

---

Document Details

⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

• ID: 71bbdf9c-6444-5998-1ace-038459a51d7c
• Version Independent ID: 55b6c7e7-680e-03bb-dc95-d38edfd188c2
• Content: Migrate to SQL server-targeted Azure Monitoring Agent's autoprovisioning process - Microsoft Defender for Cloud
• Content Source: articles/defender-for-cloud/defender-for-sql-autoprovisioning.md
• Service: defender-for-cloud
• GitHub Login: @dcurwin
• Microsoft Alias: dacurwin

[PesalaPavan]

@applefacts Thanks for your feedback! We will investigate and update as appropriate.

[ElazarK]

reassign:dcurwin

[dcurwin]

label:"backlog-item-created"