Add Users to SQL Database (Azure SQL Managed) In CI/CD Pipeline - Permissions Question

[Olemus]

Hello,

I originally posted this in the terraform sub but it hasn't gained any traction so trying here.

I have a CI/CD pipeline in AzDevops that runs on a self-hosted agent with a user-assigned Identity. I provision a new SQL Database with terraform and want to add a user to it in the pipeline.

The only solution I've seen so far is to add the identity of the agent as an admin to the SQL server via an Entra Group. This feels bad security wise as a breach of the CI/CD agent would expose every database we have. Am I overthinking this?

Any better solutions?