How do I add my local ip address so that a firewall rule can be set and I can access my database

Question

How do I add my local ip address so that a firewall rule can be set and I can access my database

Roger Swetnam 0

I am trying to get access to a Sql Data base in Azure from my local machine. When I add my local ip address, I get the following message:

Failed to update server firewall rules for server greyhounds-westus. Error: The client '******@NETORGFT.....onmicrosoft.com' with object id 'xxxxx' does not have authorization to perform action 'Microsoft.Sql/servers/firewallRules/write' over scope '/subscriptions/1fa5dcd8-28d0-4a87-847d-db50adadfa98/resourceGroups/GreyhoundsWestUS/providers/Microsoft.Sql/servers/greyhounds-westus/firewallRules/ClientIPAddress_2025-11-11_8-56-22' or the scope is invalid. If access was recently granted, please refresh your credentials.

I have in fact Global Administrator and Sql Database Contributor roles. How do I get this to work?

Erland Sommarskog 128K Reputation points MVP Volunteer Moderator

2025-11-11T22:42:31.9333333+00:00

From where are you trying to set the firewall rules? Myself, I always do it through the portal, so I can remove the old address when my IP address changes.
VRISHABHANATH PATIL 1,460 Reputation points Microsoft External Staff Moderator

2025-11-12T01:25:14.2666667+00:00
Hi Roger Swetnam,

Thank you for contacting Microsoft Q&A. Below are the comprehensive steps to help resolve the issue you reported.

Check the permissions before anything else, make sure you have the right Azure roles.

Global Administrator (Entra ID) doesn’t automatically grant resource-level permissions.

SQL Database Contributor only covers database-level actions, not server-level firewall changes.

To manage firewall rules, you need SQL Server Contributor, Contributor, or Owner at the resource group or server scope. Learn more about required roles.

Navigate to Firewall Settings

In the https://portal.azure.com:

Go to your SQL Server (not just the database).

Select Firewall and virtual networks.

Click Add client IP to add your current public IP.

If adding a range, ensure Start IP and End IP are correct.

Confirm Your Public IP

The portal usually shows your current client IP under Allowed IP Addresses. If unsure, you can check your public IP using https://whatismyipaddress.com

Check Network Connectivity

If you’re behind a corporate firewall, make sure outbound traffic on TCP port 1433 is allowed. This port is required for Azure SQL Database connections. https://learn.microsoft.com/en-us/azure/azure-sql/database/connectivity-architecture.

Review “Allow Azure Services” Setting

In the same Firewall and virtual networks section, check if Allow Azure services and resources to access this server is enabled.

Turning this on allows other Azure resources to connect without adding their IPs.

Adjust based on your security needs.

Wait for Changes to Apply

Firewall updates can take a few minutes to propagate. If you’ve just added your IP, give it a little time before retrying.

Few follow up questions

Are you adding the IP via Portal, PowerShell, or Azure CLI?

Is your IP static or dynamic? If dynamic, you’ll need to update the rule whenever it changes.

Are you behind a corporate firewall? That could block connectivity.

Is the IP format correct? Double-check before saving.

1 answer

Your answer

Erland Sommarskog 128K Reputation points MVP Volunteer Moderator

2025-11-11T22:42:31.9333333+00:00

From where are you trying to set the firewall rules? Myself, I always do it through the portal, so I can remove the old address when my IP address changes.

Answer 1

To add your local IP address to the Azure SQL Database firewall rules, follow these steps:

Check Your Permissions: Ensure that your account has the necessary permissions to modify firewall rules. You mentioned having Global Administrator and SQL Database Contributor roles, which should typically allow you to perform this action. If you're still encountering issues, it might be worth checking if there are any additional permissions required or if your role has been correctly assigned.
Add Your IP Address: You can add your local IP address by using the Azure portal:
- Navigate to your SQL server in the Azure portal.
- Go to the Firewalls and virtual networks settings.
- Click on Add client IP to automatically add your current IP address.
- Alternatively, you can manually enter your IP address and save the changes.
Refresh Credentials: If you have recently been granted permissions, try refreshing your credentials or logging out and back into the Azure portal to ensure that your permissions are recognized.
Wait for Changes to Take Effect: After adding your IP address, it may take a few minutes for the changes to propagate. If you still cannot access the database after a few minutes, double-check the firewall settings.
Check for Dynamic IP Issues: If your local machine uses a dynamic IP address, ensure that you are adding the correct IP address each time you connect. You may want to consider using a static IP address if this is a recurring issue.

If you continue to face issues, consider contacting Azure support for further assistance.

References:

Share via

How do I add my local ip address so that a firewall rule can be set and I can access my database

1 answer

Your answer