刷新 Azure SQL 数据库中服务主体的权限
我有一个具有一个读写角色的 SQL 数据库，该数据库分配了一个 AAD 组，其中添加了我的应用程序服务的服务器主体。应用程序运行正常，访问数据库没有任何问题。
最近，我创建了一个比上一个角色具有更多权限的新角色，并将其分配给不同的 AAD 组，并在其中添加了服务主体。
执行需要添加这些新权限的操作是因为权限不足而拒绝我。我多次重新启动应用程序服务，看看这种方式是否会“触发”权限刷新，但没有运气。
作为最后一个测试，我从两个组中删除了服务主体（因此应用程序根本不应该访问数据库），但应用程序的行为与以前一样，能够在数据库中读写数据。
我尝试了多种刷新权限的方法，但似乎没有找到正确的方法。 任何对此的了解都值得赞赏。
I had an SQL database with one read-write role, that had an AAD group assigned, where the Server principal of my App service was added. The application was running normally, accessing the database without any problem.
Recently I created a new role with more permissions than the last one and assigned it to a different AAD group, where I added as well the Service Principal.
Doing operations that require these new permissions added is Denying me because of insufficient permissions. I restarted the app service several times, to see if this way it "triggers" a refresh of the permissions, without luck.
As the last test, I removed the service principal from both groups (so the app shouldn't have access at all to the database), but the app is behaving as before, being able to read-write data to the database.
I tried several ways to refresh permissions but I don't seem to find the correct way.
Any light into this is really appreciated.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论