You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
description: "Learn how to use the cross db ownership chaining option in SQL Server. View considerations for turning cross-database ownership chaining on and off."
4
4
author: rwestMSFT
5
5
ms.author: randolphwest
6
-
ms.date: 08/26/2025
6
+
ms.date: 11/19/2025
7
7
ms.service: sql
8
8
ms.subservice: configuration
9
9
ms.topic: conceptual
@@ -33,7 +33,9 @@ This server option allows you to control cross-database ownership chaining at th
33
33
To determine the current status of cross-database ownership chaining, execute the following query:
34
34
35
35
```sql
36
-
SELECT is_db_chaining_on, name FROMsys.databases;
36
+
SELECT is_db_chaining_on,
37
+
name
38
+
FROMsys.databases;
37
39
```
38
40
39
41
A result of `1` indicates that cross-database ownership chaining is enabled.
@@ -50,6 +52,12 @@ Before turning cross-database ownership chaining on or off:
50
52
51
53
- If you have databases that require cross-database ownership chaining, the recommended practice is to turn off the `cross db ownership chaining` option for the instance using `sp_configure`; then, turn on cross-database ownership chaining for individual databases that require it with the [ALTER DATABASE](../../t-sql/statements/alter-database-transact-sql.md) statement.
52
54
55
+
## Security risk
56
+
57
+
Enabling cross-database ownership chaining in [!INCLUDE [ssnoversion-md](../../includes/ssnoversion-md.md)] introduces a potential security vulnerability. When this feature is active, a local database user with elevated privileges can exploit ownership chaining to escalate permissions and potentially gain **sysadmin** access.
58
+
59
+
You should avoid enabling cross-database ownership chaining at the instance level, and restrict its use to trusted, related databases only.
Copy file name to clipboardExpand all lines: docs/sql-server/azure-arc/migrate-to-azure-sql-managed-instance.md
+8-4Lines changed: 8 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -36,6 +36,10 @@ First, you choose an appropriate SQL Managed Instance target and prepare your en
36
36
37
37
Database migration is available by default for all SQL Server instances enabled by Azure Arc, starting with [!INCLUDE [sssql11-md](../../includes/sssql11-md.md)].
38
38
39
+
The **Database Migration** pane also has a useful summary of the migration status for your instance, such as the number of total databases, the recommended target, the number of completed migrations, and the number of ongoing migrations:
40
+
41
+
:::image type="content" source="media/migrate-to-azure-sql-managed-instance/database-migration-summary.png" alt-text="Screenshot of the summary on the Database Migration pane in the Azure portal." lightbox="media/migrate-to-azure-sql-managed-instance/database-migration-summary.png":::
42
+
39
43
## Integrated migration methods
40
44
41
45
Choose the migration method that best fits your needs on the **Database migration** pane. After an initial configuration to prepare your environment, the migration process automates the rest based on your selection.
@@ -51,7 +55,7 @@ The following table summarizes the two methods built into the migration process:
51
55
|**Description**| Most performant method with near real-time replication. Provides a read-only (R/O) database on the target, so you can query your data in near-real time during the migration to offload R/O workloads on the secondary, or check data during the migration. Best possible minimum downtime migration. | Most compatible migration method. Upload backups to an intermediary Azure blob storage account that the LRS service automatically restores to SQL Managed Instance continuously. No R/O database replica is available on the target. |
52
56
|**Supported versions**| SQL Server 2016 and later on Windows Server 2016 and later | SQL Server 2012 and later on Windows Server 2012 and later |
53
57
|**Supported editions**| Enterprise, Standard, and Developer editions | All editions |
54
-
|**Recommended for**| Business-critical workloads that require minimum downtime during migration and access to a R/O database on the target, with a destination target of either a General Purpose or Business Critical SQL Managed Instance. | General purpose workloads where some planned downtime is acceptable and destination target of a General Purpose SQL Managed Instance. Not recommended for Business Critical SQL managed instance targets. |
58
+
|**Recommended for**| Business-critical workloads that require minimum downtime during migration and access to a read-only database on the target, with a destination target of either a General Purpose or Business Critical SQL Managed Instance. | General purpose workloads where some planned downtime is acceptable and destination target of a General Purpose SQL Managed Instance. Not recommended for Business Critical SQL managed instance targets. |
55
59
56
60
For an in-depth comparison of the two migration methods, see [Compare Managed Instance link with LRS for migration](/azure/azure-sql/managed-instance/log-replay-service-compare-mi-link).
57
61
@@ -136,7 +140,7 @@ After your target is ready, start the migration process.
136
140
137
141
Once you've prepared your environment for [Managed Instance link migration](migration-sql-mi-prepare-link.md), you can migrate your SQL Server databases to Azure SQL Managed Instance.
138
142
139
-
Follow these steps to migrate your SQL Server databases to SQL Managed Instance by using the Managed Instance link::
143
+
Follow these steps to migrate your SQL Server databases to SQL Managed Instance by using the Managed Instance link:
140
144
141
145
1. On the **Database migration** pane, select **Migrate data**.
142
146
1. On the **New data migration** pane, choose **Migrate using real-time replication (online)**:
@@ -173,7 +177,7 @@ Follow these steps to migrate your SQL Server databases to SQL Managed Instance
173
177
174
178
:::image type="content" source="media/migrate-to-azure-sql-managed-instance/migrate-data-lrs.png" alt-text="Screenshot of the LRS migration option on the Migrate Data page in the Azure portal.":::
175
179
176
-
1. On the **Select source databases** tab, check the boxes next to the databases that you want to migrate, and then use **Next** to proceed to the next page.:
180
+
1. On the **Select source databases** tab, check the boxes next to the databases that you want to migrate, and then use **Next** to proceed to the next page:
177
181
178
182
:::image type="content" source="media/migrate-to-azure-sql-managed-instance/select-source-database-lrs.png" alt-text="Screenshot of the select source databases page when you migrate your database with LRS in the Azure portal." lightbox="media/migrate-to-azure-sql-managed-instance/select-source-database-lrs.png":::
179
183
@@ -197,7 +201,7 @@ The **Monitor and cutover** pane shows useful information about the migration pr
197
201
198
202
:::image type="content" source="media/migrate-to-azure-sql-managed-instance/monitor-migration.png" alt-text="Screenshot of the monitor migration page in the Azure portal." lightbox="media/migrate-to-azure-sql-managed-instance/monitor-migration.png":::
199
203
200
-
You can pause, resume, or cancel the migration from the **Monitor and cutover** pane. You can also view logs for information about the migration. Selecting a database takes you to a pane with more details about the source and target.
204
+
You can complete or cancel the migration from the **Monitor and cutover** pane. You can also view logs for information about the migration. Selecting a database takes you to a pane with more details about the source and target.
201
205
202
206
After the migration finishes, the migration status shows **Ready for cutover**. To cut over to the SQL Managed Instance target, select **Cutover** on the **Monitor and cutover** pane. You can also use the database details pane.
This article provides an overview of SQL Server migration in Azure Arc for [SQL Server instances enabled by Azure Arc](overview.md).
16
+
This article provides an overview of SQL Server migration in Azure Arc for [SQL Server enabled by Azure Arc](overview.md).
17
17
18
18
## Overview
19
19
@@ -31,7 +31,7 @@ SQL Server migration in Azure Arc is available by default for all SQL Server ins
31
31
32
32
## Migration targets
33
33
34
-
Currently, you can only migrate to [Azure SQL Managed Instance](migrate-to-azure-sql-managed-instance.md).
34
+
Currently, you can only migrate to [Migration to Azure SQL Managed Instance - SQL Server migration in Azure Arc](migrate-to-azure-sql-managed-instance.md).
35
35
36
36
## Microsoft Copilot assisted migration
37
37
@@ -93,11 +93,23 @@ You can obtain a migration assessment for SQL Servers located anywhere, such as:
93
93
94
94
The assessment is available for any instance of SQL Server enabled by Azure Arc.
95
95
96
+
## Database migration
97
+
98
+
On the **Database migration** pane, you can migrate your SQL Server databases to Azure SQL Managed Instance. The migration process is fully managed and automated from the Azure portal. Once you're ready to start, you can use the tiles to assess your SQL Server databases, choose a migration target, and start the migration process.
99
+
100
+
**Database migration** guides you through the migration with easy to follow tiles for each step of the process:
101
+
102
+
:::image type="content" source="media/migrate-to-azure-sql-managed-instance/migration-home-page.png" alt-text="Screenshot that shows the migration home page for a SQL Server instance in the Azure portal." lightbox="media/migrate-to-azure-sql-managed-instance/migration-home-page.png":::
103
+
104
+
The **Database Migration** pane also has a useful summary of the migration status for your instance, such as the number of total databases, the recommended target, the number of completed migrations, and the number of ongoing migrations:
105
+
106
+
:::image type="content" source="media/migrate-to-azure-sql-managed-instance/database-migration-summary.png" alt-text="Screenshot of the summary on the Database Migration pane in the Azure portal." lightbox="media/migrate-to-azure-sql-managed-instance/database-migration-summary.png":::
107
+
96
108
## Related content
97
109
98
-
-[Migration dashboard](migration-inventory.md)
99
-
-[Assessment for migration to Azure](migration-assessment.md)
100
-
-[Prepare environment for a Managed Instance link migration](migration-sql-mi-prepare-link.md)
101
-
-[Prepare environment for an LRS migration](migration-sql-mi-prepare-log-replay-service.md)
110
+
-[Track migration journey by using migration dashboard - SQL Server enabled by Azure Arc](migration-inventory.md)
111
+
-[Assess migration readiness - SQL Server enabled by Azure Arc](migration-assessment.md)
112
+
-[Prepare environment for a Managed Instance link migration - SQL Server migration in Azure Arc](migration-sql-mi-prepare-link.md)
113
+
-[Prepare environment for LRS migration - SQL Server migration in Azure Arc](migration-sql-mi-prepare-log-replay-service.md)
102
114
-[SQL Server enabled by Azure Arc](overview.md)
103
115
-[Deployment options for SQL Server enabled by Azure Arc](deployment-options.md)
0 commit comments