This article outlines the information that C360 require to be able to connect to a Azure database hosted within a customer environment.
One of the options available to customers is to host the report database within their own Azure tenant.
This article refers to a Platform as a Service (PaaS) Azure SQL Database. Not a SQL Managed Instance or SQL Server installed on a (Infrastructure as a Service (Paas)) server within Azure.
In order for Cognition360 to be able push the customers data from our data warehouse to the self hosted report database the following information is required:
Azure SQL Server Name - {servername}.database.windows.net
Allow Azure services and resources to access this server - Yes
Deny public network access - No
OR
Deny public network access - Yes with Cognition360 IPs added to Firewall rules to allow access.
Azure SQL Database Name - as defined by the customer
Compute - minimum S3 (100 DTU's)
Storage - minimum 100 Gb
Retention period - 7 days minimum
SQL User account
Username
Password
No MFA set on this SQL account
SQL User Permissions
allow login to database
added to db_owner role for initial set up and deployment
added to Data Writer role
added to Data Reader role
Granted Execute
Granted Alter
Granted Control