Azure SQL Database Setup Guide

Authenticate with Azure Active Directory PRIVATE PREVIEW

IMPORTANT: You must have a properly configured Active Directory enabled within your Azure account to authenticate with Azure Active Directory. Follow Azure’s Active Directory for Azure SQL setup instructions to properly enable Active Directory Authentication on your Azure SQL Database.

Azure Active Directory allows you to authenticate Fivetran using OAuth-style authentication. You can easily limit permissions and revoke Fivetran’s access at any time, while also not sharing any user or password credential information with Fivetran.

1. In your connector setup form, choose the Connect via Azure Active Directory authentication method.

2. In Azure Active Directory, click the Properties button.

   

3. Find and copy your tenant ID.

   

4. Enter the Tenant ID in your connector setup form, then click Authorize.

5. In your Azure SQL database, create a user using the following command. Even though you don’t share user or password information with Fivetran, the database eventually requires a user to issue queries.

CREATE USER [Fivetran] FROM EXTERNAL PROVIDER;

Authenticate with username and password

With this method, you provide Fivetran with a username and associated password for a properly-configured user on the database. You’ll create this user later in this setup guide.

Connect directly (TLS required)

IMPORTANT: You must have TLS enabled on your database to connect directly to Fivetran. Follow Azure’s TLS setup instructions to enable TLS on your database.

Fivetran connects directly to your database instance. This is the simplest connection method.

To connect directly, create a firewall rule to allow access to Fivetran’s IPs for your database’s region.

Connect using SSH (TLS optional)

Fivetran connects to a separate server in your network that provides an SSH tunnel to your database. You must connect through SSH if your database is in an inaccessible subnet on a virtual network.

To connect using SSH, create a firewall rule to allow access to your SSH tunnel server’s IP address.

Before you proceed to the next step, you must follow our SSH connection instructions to give Fivetran access to your SSH tunnel. If you want Fivetran to tunnel SSH over TLS, follow Azure’s TLS setup instructions to enable TLS on your database.

Connect using Azure Private Link undefined

IMPORTANT: You must have a Business Critical plan to use Azure Private Link.

Azure Private Link allows Virtual Networks (VNets) and Azure-hosted or on-premises services to communicate with one another without exposing traffic to the public internet. Learn more in Microsoft’s Azure Private Link documentation.

Follow our Azure PrivateLink setup guide to configure Private Link for your database.

Change tracking

1. Enable change tracking at the database level:

   ALTER DATABASE [<database>] SET CHANGE_TRACKING = ON;
   

2. Enable CT for each table you want to integrate:

   ALTER TABLE [<schema>].[<table>] ENABLE CHANGE_TRACKING;
   

3. Grant the Fivetran user VIEW CHANGE TRACKING permission for each of the tables that have change tracking enabled:

   GRANT VIEW CHANGE TRACKING ON [<schema>].[<table>] TO <username>;
   

Change data capture

1. Enable change data capture at the database level:

   USE [<database>];
   EXEC sys.sp_cdc_enable_db;
   

2. Enable CDC for each table you want to integrate:

   EXEC sys.sp_cdc_enable_table  
   @source_schema = [<schema>],
   @source_name   = [<table>],
   @role_name     = [<username>];
   

NOTE: Fivetran only supports tables with a single CDC capture instance. Our syncs only include tables and columns that are present in a CDC instance. If you add new tables or columns, you must create a new CDC instance that includes them and delete the old instance.

Fivetran Teleport Sync undefined

You do not need to do any additional configuration to use Fivetran Teleport Sync.