Configuring available Azure service principals for a workspace

For authentication to a PostgreSQL, MySQL, or SQL Server server connection, you can choose to use an Azure service principal instead of a password.

You configure the available service principals from the Azure Service Principals section of the workspace settings page.

Azure Service Principals section of the workspace settings page

Adding a service principal

To add a service principal:

1. Click Add Azure Service Principal.

Add Azure Service Principal panel to add a service principal

1. In the Name field, provide a name for the service principal.
2. In the Tenant ID field, provide your Microsoft Entra tenant identifier.
3. In the Client ID field, provide the application identifier of the service principal
4. In the Client Secret field, provide the client secret.
5. Optionally, in the Note field, provide a description of how the service principal is intended to be used.
6. To test the service principal, click Test.
7. To save the service principal, click Save.

Mapping the service principal to a Microsoft Entra user

When you use a service principal as the authentication method for a server connection, you must provide a username.

In your Azure database, create a Microsoft Entra user that is mapped to the service principal.

Grant the user the required permissions.

Editing a service principal

To edit an existing service principal:

1. Click the edit icon for the service principal
2. Update the service principal configuration.
3. Click Save.

Deleting a service principal

You cannot delete a service principal that is currently used by a server connection.

To delete a service principal, click its delete icon.