In SQL Server, the right to open a connection to a database. Fabric's equivalent is Read permission on an item, which allows connecting to a warehouse or SQL endpoint but not querying anything in it.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains CONNECT in context, with comparison tables and the common traps.
Terms in this definition
- SQL Server
The relational database from Microsoft that organisations host and run themselves, in their own data centres or on VMs. Its engine also sits underneath the Azure SQL services and SQL database in Fabric.
- Connection
Resource that attaches a virtual network gateway to its peer, which may be an ExpressRoute circuit, a second VNet gateway (Vnet2Vnet) or a local network gateway over IPsec. Resetting it recovers a single tunnel and avoids rebooting the whole gateway.
- Schema
The middle part of a Unity Catalog name (
catalog.schema.table), grouping tables, views, volumes, functions and models inside a catalog. A grant on it covers everything in it now and later, and nothing inside can be reached withoutUSE SCHEMA. - CRUD
Shorthand for create, read, update and delete, the four basic things you do with data. Data-plane roles in Azure Cosmos DB, for instance, authorise those operations on items.
- Warehouse
Fabric item offering complete T-SQL support (DML, DDL, multi-table transactions) over Delta tables held in OneLake; lakehouse SQL analytics endpoints, by contrast, are read-only.
- SQL warehouse
Compute dedicated to running SQL queries, dashboards and BI tools, available as serverless, pro or classic. Serverless is the recommended type where offered, and every type runs Photon by default.
Related terms
- Access this computer from the network
Accounts holding this user right can connect across the network, to SMB shares for instance.
- Analysis Services
VertiPaq, Microsoft's in-memory analytics engine, sits underneath every Power BI semantic model and is likewise available as Azure Analysis Services or SQL Server Analysis Services. Tools connect to it over XMLA, using its client libraries.
- az aks get-credentials
Fetches AKS cluster credentials and merges them into kubeconfig, letting kubectl connect. With --admin, it instead retrieves the local administrator credential, intended for emergencies.
- azcmagent
CLI that ships with the Azure Connected Machine agent. Running
azcmagent connectregisters a server with Azure Arc, and supplying a service principal ID plus a secret or certificate makes that onboarding unattended. - Azure IR
Integration runtime in Data Factory that can connect only to data stores in the cloud.
- Azure SQL connection policy
Azure SQL option deciding how clients reach the database: via the gateway with Proxy, or straight to the hosting node with Redirect. It affects the network path only, not who may connect.
- Azure VPN Gateway
Encrypts traffic with IPsec/IKE so an Azure virtual network can connect securely to on-premises locations, remote users or other VNets, running across the public internet or Microsoft's own backbone.
- AzureFrontDoor.Frontend
Service tag covering the Front Door addresses that clients connect to, applied when controlling outbound traffic.