DB1という名前のAzure SQLデータベースを、SQL1という名前のAzure SQLサーバーにデプロイします。
現在、サーバー管理者のみがDB1にアクセスできます。
Analystsという名前のAzure Active Directory(Azure AD)グループには、DB1にアクセスする必要があるすべてのユーザーが含まれています。
次のデータセキュリティ要件があります。
* The Analysts group must have read-only access to all the views and tables in the Sales schema of DB1.
* A manager will decide who can access DB1. The manager will not interact directly with DB1.
* Users must not have to manage a separate password solely to access DB1.
Which four actions should you perform in sequence to meet the data security requirements? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

正解:

1 - From the Azure Portal, set the Active Directory admin for SQL1.
2 - On DB1, create a contained user for the Analysts group by using Transact-SQL
3 - From Microsoft SQL Server Management Studio (SSMS), sign in to SQL1 by using the account set as the Active Directory admin.
4 - On DB1, grant the VIEW and SELECT DEFINTION..
References:
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-aad-authentication-configure