Add a user to a sql database in azure without syncing with entra id; where can i find ssms

Jeanne Howard 0 Reputation points
2026-09-04T13:32:42.2733333+00:00

I am trying to add a db_writer to a database without tying my database to entra ID. I want people to access the database via seperate login and passwords. The documentation does appear to match whats available on my screen and I cannot find the role for db_writer in the list.

Azure SQL Database

4 answers

Sort by: Oldest
Most helpful Newest Oldest

  1. AI answer

    2026-09-04T13:32:54.36+00:00

    For Azure SQL Database, Microsoft Entra ID is not required. A SQL-authenticated database user can be created with its own username and password, then granted write access.

    Use this flow in SQL Server Management Studio (SSMS):

    1. Connect to the target Azure SQL database.
    2. In Object Explorer, right-click the database and select New Query.
    3. Run:
    CREATE USER ApplicationUser WITH PASSWORD = 'YourStrongPassword1';
    1. Grant write access:
    ALTER ROLE db_datawriter ADD MEMBER ApplicationUser;
    1. If read access is also needed:
    ALTER ROLE db_datareader ADD MEMBER ApplicationUser;

    db_writer is not the Azure SQL Database fixed role name shown in the documentation provided here. The documented fixed role for write access is db_datawriter.

    If the goal is to let the user create tables or other schema objects, that is different from data write access. The provided context only documents fixed roles such as db_owner, db_ddladmin, db_datawriter, and db_datareader, and recommends using db_owner only for a few users.

    SSMS is the tool referenced for connecting and running the query. The documented path is to connect with SQL Server Management Studio, then use Object Explorer and New Query.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

  2. Erland Sommarskog 137.4K Reputation points MVP Volunteer Moderator
    2026-09-04T14:36:10.2933333+00:00

    If you don't have SSMS installed, I would recommend that you install and download it. Without SSMS, or some other query tool, administering a database is difficult. But there is a query editor in the Azure portal.

    There is no predefined role db_writer, but there is a predefined db_datawriter. Membership in that role gives the user rights to insert, update and delete data in tables. However, you talk about other users being able to create web apps. The web apps themselves are created elsewhere, but possibly web app developers wants to create tables and stored procedures. Permission to do that does not follow with db_datawriter.

    To that end, I recommend that you do:

    CREATE ROLE my_ddladmin
ALTER MEMBER db_ddladmin ADD MEMBER my_ddladmin
DENY ALTER ANY DATABASE DDL TRIGGER TO my_ddladmin

    Then you add developers to the role my_ddladmin.

    That is, the predefined role db_ddladmin gives users rights to create stored procedures, tables etc. Unfortunately, it also gives them permission to deal with DDL triggers, something which should reserved for the database owner. This is why I recommend that you to create your own role.

    Note that membership in db_ddladmin, does not give permission to change data in tables, so developers also need membership in db_ddladmin.

    Was this answer helpful?

    0 comments
  3. Deepesh Dhake 1,165 Reputation points
    2026-09-04T17:30:15.84+00:00

    You may try:

    Azure SQL Database then Portal Query editor (preview), in the database's left menu. Fastest given your owner access.

    Any platform then Azure Data Studio or sqlcmd.

    Inside a database (run via any of the tools above):

    CREATE USER [username] WITH PASSWORD = 'StrongPassword!';  -- Azure SQL DB, contained user
ALTER ROLE db_datawriter ADD MEMBER [username];  -- edit data
ALTER ROLE db_datareader ADD MEMBER [username];  -- read data
ALTER ROLE db_ddladmin  ADD MEMBER [username];   -- create/alter tables, procs (schema)

    Was this answer helpful?

    0 comments
  4. Himaja Y 545 Reputation points Microsoft External Staff Moderator
    2026-09-05T09:31:32.55+00:00

    Hi @Jeanne Howard ,

    Thank you for reaching out to the Microsoft Q&A forum. 

    If you do not want to use Microsoft Entra ID, you can create contained database users directly in Azure SQL Database and authenticate them using a username and password specific to that database.

    Since you have owner/admin access, the quickest option is to use the Query Editor in the Azure Portal (if enabled) or connect with tools such as Azure Data Studio, sqlcmd, or SQL Server Management Studio (SSMS).

    You can create a user and assign the required permissions using T-SQL:

    CREATE USER [username] WITH PASSWORD = 'StrongPassword!';
ALTER ROLE db_datareader ADD MEMBER [username];
ALTER ROLE db_datawriter ADD MEMBER [username];
ALTER ROLE db_ddladmin ADD MEMBER [username];

    Role descriptions:

    • db_datareader: Read data from tables and views.
    • db_datawriter: Insert, update, and delete data.
    • db_ddladmin: Create and modify database objects such as tables, views, stored procedures, and functions.
    • db_owner: Full control of the database (use only when absolutely necessary).

    For users who need to edit data and participate in database development for web applications, the combination of db_datareader, db_datawriter, and db_ddladmin is typically sufficient and follows the principle of least privilege.

    Regarding SSMS, it is a separate client tool and is not automatically available through the Azure Portal. You can download and install the latest version of SSMS locally if you prefer a graphical management experience.

    If you encounter any errors while creating the user or assigning roles, please share the exact error message and we can help troubleshoot further.

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.