AptifySA user support for Azure Enablement

Owned by Madhuri Dange (Unlicensed)
Apr 28, 2023

Introduction

Aptify release 7.0 enables clients to host Aptify database into cloud-managed offerings such as Azure Managed SQL Instance. For using Azure Managed SQL Instance, a new user login must be created, namely, AptifySA, having the same system administrator-level permissions as that of a SA user account. Azure Managed SQL Instance does not grant access to the SA user account.

Currently, the SA login is automatically added as a member of the sysadmin fixed server role, having all permissions on that instance, and can perform any activity. By default, the SA user is the only user granted administrative permissions when Aptify is installed. One of the principal uses of the SA account is to log in to a newly restored database to run the license import wizard and match licenses to the new server. The SA account can do this as it is a single account that can log in to Aptify without needing an assigned License.
 The Cloud services do not grant access to the Microsoft supplied SA login used in the above-mentioned exceptional cases. Also, there are few areas in the Aptify core product where SA user is hardcoded (this is done to elevate the permissions while performing some tasks). Going forth, all the activities performed using SA login will also be performed using AptifySA login.

Prerequisites

To enable this feature, perform below mentioned steps:

  1. Setup a new SQL user account named AptifySA. This account should be setup with same level of permissions as SA. See AptifySA User creation for the Instructions to setup the account.

    Note: The AptifySA account is not recommended for typical usage, Aptify strongly recommends using named accounts.

  2. Identify the references to SA user in js/vb/cs files of the customized entities code and include AptifySA user in the same references. See Instructions to include AptifySA user reference in customizable entities code for more details.

Adding AptifySA user permission to Security Keys

Below are the instructions to add permissions for AptifySA user to security keys.

  1. Log in to Aptify Web and navigate to Framework->Security key Service.
  2. Open the security key record for which you want to add AptifySA user permission.
  3. Under User Permissions tab, SA user is present by default.
  4. Click New button to add AptifySA user.