Mirrored Azure SQL DB - 'VIEW SERVER SECURITY STATE permission error

[jsarali]

Hi,
Using the MS tutorial I have followed all the steps. Despite that I get the following error (the tables load):

The Server admin of the Azure SQL DB is Admin Object/App ID. My super user credentials are used to access the Azure SQL DB. I login to Fabric using my normal user ID. I have created all these users and granted the permissions mentioned in the tutorial Document for all the users. SQL Admin, my Super user and the normal user credentials. But despite that I get the error:

The database cannot be mirrored to Fabric due to below error: Unable to retrieve SQL Server managed identities. A database operation failed with the following error: 'VIEW SERVER SECURITY STATE permission was denied on object 'server', database 'master'. The user does not have permission to perform this action.' VIEW SERVER SECURITY STATE permission was denied on object 'server', database 'master'. The user does not have permission to perform this action., SqlErrorNumber=300,Class=14,State=1

[v-bmanikante · Accepted solution]

Hello @jsarali ,

Thank you for reaching out to Microsoft Fabric Community Forum.

@lbendlin Thank you for your quick response.

When configuring Azure SQL Database mirroring to Microsoft Fabric, the following error may occur:

"Unable to retrieve SQL Server managed identities. VIEW SERVER SECURITY STATE permission was denied on object 'server', database 'master'. The user does not have permission to perform this action."
 

This error is caused by missing server-level permissions. Even if the user has full database-level access, Microsoft Fabric requires visibility into server security metadata to complete the mirroring process.

You can try,

1. Connect to the Azure SQL logical server as a Server Admin or Azure Active Directory Admin.
2. Grant the required permissions to the user or service principal accessing the database from Fabric:

GRANT VIEW SERVER STATE TO [UserOrServicePrincipal];
GRANT VIEW SERVER SECURITY STATE TO [UserOrServicePrincipal];

• These permissions must be granted at the server level, not just at the database level.
• If permission cannot be granted directly, ensure the user is configured as an Azure AD Admin on the SQL Server.
  

If this post helps, then please consider Accepting as solution to help the other members find it more quickly, don't forget to give a "Kudos" – I’d truly appreciate it!

Regards,

B Manikanteswara Reddy

[jsarali · Accepted solution]

This issue got resolved once I could grant the necessary permisions and after increasing the DTUs on the Azure SQL Database.

[v-bmanikante]

Hello @jsarali ,

It looks like your problem has been solved, please mark the helpful reply and accept it as solution, it will be helpful for other members of the community who have similar problems as yours to solve it faster .

Thank you very much for your kind cooperation!

Regards,

B Manikanteswara Reddy

[v-bmanikante · Accepted solution]

Hello @jsarali ,

Thank you for reaching out to Microsoft Fabric Community Forum.

@lbendlin Thank you for your quick response.

When configuring Azure SQL Database mirroring to Microsoft Fabric, the following error may occur:

"Unable to retrieve SQL Server managed identities. VIEW SERVER SECURITY STATE permission was denied on object 'server', database 'master'. The user does not have permission to perform this action."
 

This error is caused by missing server-level permissions. Even if the user has full database-level access, Microsoft Fabric requires visibility into server security metadata to complete the mirroring process.

You can try,

1. Connect to the Azure SQL logical server as a Server Admin or Azure Active Directory Admin.
2. Grant the required permissions to the user or service principal accessing the database from Fabric:

GRANT VIEW SERVER STATE TO [UserOrServicePrincipal];
GRANT VIEW SERVER SECURITY STATE TO [UserOrServicePrincipal];

• These permissions must be granted at the server level, not just at the database level.
• If permission cannot be granted directly, ensure the user is configured as an Azure AD Admin on the SQL Server.
  

If this post helps, then please consider Accepting as solution to help the other members find it more quickly, don't forget to give a "Kudos" – I’d truly appreciate it!

Regards,

B Manikanteswara Reddy

[jsarali]

I have connected to SQL server using my super user credentials. No, when I run the GRANT VIEW SERVER STATE, I get the following error.

Additionally, I have also checked the permissions I have.

[lbendlin]

what's the server version? Did you maybe lower the compatibility level?

[lbendlin]

Can you run that query/action in SSMS?