Requirements

Supported Target Systems

The SQL instance scan tasks are supported on the following target systems:

Microsoft Azure SQL Database Access Settings

Firewall access must allow access to the SQL port on the Microsoft Azure SQL Database by default 1433.

The service account or custom credentials in use must have permissions to read the instance configuration and databases.
When using either Azure Active Directory Password or Azure Active Directory Integrated authentication in the settings, the Microsoft Active Directory Authentication Library for Microsoft SQL Server must be installed. This is automatically installed by Microsoft SQL Server, and Microsoft SQL Server Management Studio.

On-Premises Access Settings

The SQL instance scan tasks use the SQL server management objects to obtain information remotely from SQL instances, and either WMI or PowerShell remoting to obtain host information.

Firewall access must allow access to the SQL port on the remote SQL instance - by default TCP/1433.
To obtain host information such as manufacturer and serial number, firewall access must be permitted to the either PowerShell remoting or WMI ports on the remote machine.
The service account or custom credentials must have administrator rights on the remote machine to obtain host information using WMI.

The service account or custom credentials must have sysadmin access rights on the remote SQL Instance. This requirement can be overridden using the tolerance settings.

Local Service

Automatic Detection

SQL instances can be automatically detected and scanned by Windows machine scan tasks.

Clustered SQL instances can be automatically detected and scanned by Microsoft failover cluster scan tasks.