Specified ARM Template Fails for Subsequent Runs

[Jtango18]

The ARM template specified fails on subsequent deployments. Works correctly the first time, the fails with the error Invalid value given for parameter ExternalAdministratorLoginName. Specify a valid parameter value. on all subsequent runs

---

Document Details

⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

• ID: f074fdcf-8d8b-ae37-a259-75735780a06d
• Version Independent ID: 8e7c9bd3-9063-d814-d77a-d2b2eaf5d5cd
• Content: Create an Azure SQL logical server using a user-assigned managed identity - Azure SQL Database
• Content Source: azure-sql/database/authentication-azure-ad-user-assigned-managed-identity-create-server.md
• Service: sql-database
• Sub-service: security
• GitHub Login: @GithubMirek
• Microsoft Alias: mireks

[shaktisingh-msft]

H @Jtango18 ,

Thanks for sharing this feedback. We will look into this and update as appropriate.

[shaktisingh-msft]

Hi @nofield ,@GithubMirek,

Could you please look into this request, thanks.

[nofield]

Hi @Jtango18, thanks for sharing this issue with us. Would you mind also sharing your payloads or correlation request ids so we can take a look at the requests? If you'd like to do further troubleshooting privately from this thread you can send an email to SQLAADFeedback@microsoft.com.

What you're experiencing is expected behavior if the aad_admin_name parameter is modified between runs. It's not explained in this doc because the focus is on only an initial deployment, but our API doesn't support updates to the Azure AD administrator property through the Servers API. This is due to a difference in RBAC permission requirements between create server and updating Azure AD properties.

If the aad_admin_name parameter is unchanged, it should be a no-op and succeed.

To update the administrator, you can use the Microsoft.Sql/servers/administrators ARM template, which is documented here: https://learn.microsoft.com/en-us/azure/templates/microsoft.sql/servers/administrators?pivots=deployment-language-arm-template.

I've also taken it as an action item to clearly articulate that the administrator properties are only create/read on the Servers API (whether that's the issue here or not).

[MashaMSFT]

Hi @Jtango18 , thanks for contacting Microsoft! Looks like we were able to address your question so I'll go ahead and close out this Git Issue but please feel free to comment should you need anything further.

Thanks again for reaching out and I hope you have a wonderful rest of your day!
Masha from the SQL Docs team
#please-close