azure-postgres

What problem does it solve?

This skill enables passwordless authentication for Azure Database for PostgreSQL Flexible Server using Microsoft Entra ID, simplifying access control for developers, apps, and teams while enabling secure migrations away from passwords.

Core Features & Use Cases

• Migrate existing PostgreSQL servers from password-based authentication to Entra ID authentication.
• Configure developer access with Azure identities and managed identities for applications.
• Implement group-based access control with regular synchronization of group members.
• Follow best practices for token-based connections and RBAC templates when granting permissions.

Quick Start

Prepare your Azure PostgreSQL server for Entra ID authentication by configuring an Entra admin, then apply identity mappings and permissions using the included scripts. For common tasks, run:

• Create an Entra admin and enable Entra authentication on your server with the provided scripts (scripts/az-commands.sh).
• Map a user: scripts/setup-user.sh <resource-group> <server-name> <user-upn> <database> <permission-level>.
• Map a group: scripts/setup-group.sh <resource-group> <server-name> <group-name> <database> <permission-level> [enable-sync].
• Use tokens for authentication: export PGPASSWORD=$(az account get-access-token --resource-type oss-rdbms --query accessToken -o tsv) and connect with psql.