Question

You manage an Azure SQL logical server hosting six databases. A business partner needs access only to the 'PartnerPortal' database from their office IP range (203.0.113.0/24). Company policy requires that no firewall change grant access to any other database on the same server. Which approach meets this requirement?

Accepted Answer

Create a database-level firewall rule in the PartnerPortal database using sp_set_database_firewall_rule.

Answer

Create a server-level firewall rule for the IP range using the Azure portal on the logical server.

Answer

Add the IP range to the 'Allow Azure services and resources to access this server' setting.

Answer

Configure a virtual network rule on the logical server for the partner's subnet.