How to enable "Allow Azure services and resources to access this server" through PowerShell (Azure CLI)?

Question

After creating a new Azure SQL server using az sql server create, how can I enable the following options through PowerShell(Azure CLI)?

score 14 · Accepted Answer · answered Oct 18 '19 at 11:30

14

It's in the documentation for Azure SQL somewhere, if you search for "azure sql firewall allow azure services", but here's what you need to do - create a rule with a start and end address of 0.0.0.0, like this:

az sql server firewall-rule create --resource-group <resource group name> --server <azure sql name> -n <any name> --start-ip-address 0.0.0.0 --end-ip-address 0.0.0.0

answered Oct 18 '19 at 11:30

Scott Heath

830
7
5

This seems to enable that option. Thanks! – Mason Oct 18 '19 at 12:50
2

It's in the API docs: https://learn.microsoft.com/en-us/rest/api/sql/firewallrules/createorupdate – Isaac Rosado Jan 02 '20 at 03:55

score 3 · Answer 2 · answered Jul 23 '20 at 16:51

3

To expand on Scott answer, the equivalent way to do this in the Azure PowerShell module is:

New-AzSqlServerFirewallRule -FirewallRuleName <fw-rule-name> -StartIpAddress '0.0.0.0' -EndIpAddress '0.0.0.0' -ServerName <sql-server-name> -ResourceGroupName <resource-group-name>

answered Jul 23 '20 at 16:51

Brandon Olin

322
3
11

1

Do you know what to do when you have "Deny public access" to Yes. Then you can't configure firewall rules. – Piotr Perak Feb 12 '21 at 14:59

score 2 · Answer 3 · answered Jan 21 '21 at 09:15

my small contribution here.

the below az command with the respective group and sqlservername sets "Allow Azure services and resources to access this server" to Yes

az sql server firewall-rule create -g -s -n AllowAllWindowsAzureIps --start-ip-address 0.0.0.0 --end-ip-address 0.0.0.0

score 1 · Answer 4 · answered Feb 17 '21 at 15:33

1

Just add a new rule with specific name (AllowAllWindowsAzureIps);

New-AzSqlServerFirewallRule -ResourceGroupName <resourceGroup> -ServerName <serverName> -FirewallRuleName "AllowAllWindowsAzureIps" -StartIpAddress "0.0.0.0" -EndIpAddress "0.0.0.0"

answered Feb 17 '21 at 15:33

user2708754

31
6

score 0 · Answer 5 · edited Apr 27 '22 at 12:31

0

Just came across this and I believe it's doable via the following script now...

New-AzSqlServerFirewallRule -ResourceGroupName <ResourceGroup> -ServerName <SQLServerName> -AllowAllAzureIPs

edited Apr 27 '22 at 12:31

ChrisGPT was on strike

127,765
105
273
257

answered Apr 27 '22 at 11:29

Jon

1

How to enable "Allow Azure services and resources to access this server" through PowerShell (Azure CLI)?

5 Answers5

Linked