SQL Azure Connection and Row-level Security

[hintbw-abc]

I'm creating an app that will read from some SQL Azure DB tables. Given the data that will be accessed the tables have row-level security implemented so users can only see what they have permissions to see. My concern is I provide the app a connection string that will be linked to me, rather than the other users who will be using the app. Instead of seeing what they are supposed to see, they will see anything I'm allowed to see in the table (which is much more than they can).

Am I right in my understanding that the connection string I provide for the app to connect with the table will use my credentials? Any thoughts about adding support for connecting to an Azure SQL DB source using Azure Active Directory authentication instead of shared credentials?

[Steelman70]

Hi, thanks for this discussion because it is very relevant for what I want to go on to do.

I have worked very well so far with DB credentials, see here for example.

The string I use for database credentials is this:

Server=tcp:MYSERVER.database.windows.net;Database=MYDATABASE;User ID=DBUSER;Password=DBPASSWORD

However, it would seem from this article that you can use Azure AD credentials using integrated (Windows) authentication with something like the following connection string:

Data Source=n9lxnyuzhv.database.windows.net; Authentication=Active Directory Integrated

The above string identifies the server and not the database so I suspect it will not work, but some combination of the two strings could work, something like:

Server=tcp:MYSERVER.database.windows.net;Database=MYDATABASE;Authentication=Active Directory Integrated

I have not set up Azure AD yet so cannot experiment myself.  Sorry I cannot be of more help, but please keep us updated with progress.

[hintbw-abc · Accepted solution]

Considering the changes to how you connect to an Azure SQL DB it's kind of moot point (no connection strings anymore, just fill-in the fields). I have posted this suggestion to https://powerusers.microsoft.com/t5/PowerApps-Ideas/Connecting-to-DB-connection-cloud-and-on-prem-as... and consider my question answered as (not possible right now). It would be good to continue any discussion related to this at the idea post I just listed.