无法将显示名称中带有“:"的Azure AD组添加到Azure SQL，我缺少什么吗? [英] Unable to add Azure AD group with ':' in display name to Azure SQL, am I missing something?

问题描述

在我们的Azure AD中，我们具有名称中以(:)命名的安全组.因此，格式类似于 SG:{Group Name} .当我尝试使用下面的查询将名称中带有(:)的组添加到Azure SQL时

In our Azure AD, we have Security groups named with (:) in the name. So the format looks like SG:{Group Name}. When I try to add a group with (:) in the name to Azure SQL using a query below

CREATE USER [SG:Developers] FROM EXTERNAL PROVIDER;

我在下面显示了一个错误

I'm getting an error shown below

Msg 15007, Level 16, State 6, Line 1 'SG:Developers' is not a valid
login or you do not have permission.

我可以添加名称中带有空格或下划线的组，到目前为止，它只是引起问题的(:).

I am able to add groups with spaces or underscores in the name, so far its just (:) causing issues.

我不相信它的权限问题，因为我已经使用Active Directory管理员凭据登录到Azure SQL数据库.

I don't believe its permissions issue, cos I'm logged in to Azure SQL Database with Active Directory Admin credentials.

编辑

正如阿尔贝托·莫里洛(Alberto Morillo)在他的回答中所建议的那样，(:)是问题所在.但是我想了解的是，当我从Azure Portal添加与Active Directory Admin相同的[SG:Developers]组时，为什么它可以正常工作，而当尝试使用它将其添加到任何数据库时却不起作用.T-SQL语句.缺少什么链接?

As Alberto Morillo suggested in his answer, it could be true that (:) is the issue. But what I'm trying to understand is, why does it work without any issues when I add the same [SG:Developers] group as Active Directory Admin from Azure Portal, but doesn't work when trying to add it to any DB using a T-SQL statement. Whats the missing link?

交叉发布在推荐答案

Active Directory中的名称不允许冒号(:)，如此支持文章.

Names in Active Directory do not allow colon (:) as mentioned in this support article.

这篇关于无法将显示名称中带有“:"的Azure AD组添加到Azure SQL，我缺少什么吗?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！