DP-300 Certification Practice Question #90

Question

You have an Azure subscription that is linked to an Azure Active Directory (Azure AD) tenant named contoso.com The subscription contains an Azure SQL database named SQL1 and an Azure web app named app1. App1 has the managed identity feature enabled.

You need to create a new database user for app1.

How should you complete the Transact-SQL statement? To answer select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Accepted Answer

When creating an Azure AD database user for a **managed identity** (system-assigned or user-assigned) in Azure SQL Database, the correct T-SQL syntax is `CREATE USER [<app-name>] FROM EXTERNAL PROVIDER`. The user's display name in Azure AD is used (e.g., "App1"), not the UPN format with domain. MS Learn's tutorial on Azure AD service principal authentication explicitly shows this syntax. The majority-voted community view (TheMCT, MLCLUB with 6 👍 each) supports `[App1] FROM EXTERNAL PROVIDER`.

More DP-300 practice questions