Sql Vulnerability Assessment Baseline Rules - Add

Service:: Defender for Cloud

API Version:: 2026-04-01-preview

Set a list of baseline rules. Will overwrite any previously existing results (for all rules).

POST https://management.azure.com/{resourceId}/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules?api-version=2026-04-01-preview

With optional parameters:

POST https://management.azure.com/{resourceId}/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules?databaseName={databaseName}&api-version=2026-04-01-preview

URI Parameters

Name	In	Required	Type	Description
resourceId	path	True	string	The identifier of the resource.
api-version	query	True	string	The api version.
databaseName	query		string	The name of the database to assess. Required when the API is called on the parent resource (e.g., server level) rather than on a specific database resource, since the database name is not part of the resource URI. This is the only way to assess system databases (e.g., master), which cannot be referenced directly in the resource URI.

Request Body

Name	Type	Description
latestScan	boolean	Take results from latest scan.
results	object	Expected results to be inserted into the baseline. Leave this field empty if latestScan == true.

Responses

Name	Type	Description
200 OK	RulesResults	Successfully set the database vulnerability assessment rule baselines.
Other Status Codes	CloudError	Error response describing why the operation failed.

Security

azure_auth

Azure Active Directory OAuth2 Flow

Type: oauth2
Flow: implicit
Authorization URL: https://login.microsoftonline.com/common/oauth2/authorize

Scopes

Name	Description
user_impersonation	impersonate your user account

Examples

Set baseline rules on a resource (using databaseName parameter) - Sql Managed Instance

Set baseline rules on a resource (using databaseName parameter) - Sql Server

Set baseline rules on a resource (using databaseName parameter) - Synapse

Set baseline rules on a resource - Arc Machine

Set baseline rules on a resource - Sql Managed Instance

Set baseline rules on a resource - Sql Server

Set baseline rules on a resource - Synapse

Set baseline rules on a resource - Virtual Machine

Set baseline rules on a resource (using databaseName parameter) - Sql Managed Instance

Sample request

HTTP

POST https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/managedInstances/myManagedInstance/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules?databaseName=master&api-version=2026-04-01-preview

{
  "latestScan": true,
  "results": {}
}

Sample response

Status code:: 200

{
  "value": [
    {
      "properties": {
        "results": [
          [
            "userA",
            "SELECT"
          ],
          [
            "userB",
            "SELECT"
          ]
        ]
      },
      "name": "VA1234",
      "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/managedInstances/myManagedInstance/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
      "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
    }
  ]
}

Set baseline rules on a resource (using databaseName parameter) - Sql Server

Sample request

HTTP

POST https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/servers/myServer/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules?databaseName=master&api-version=2026-04-01-preview

{
  "latestScan": true,
  "results": {}
}

Sample response

Status code:: 200

{
  "value": [
    {
      "properties": {
        "results": [
          [
            "userA",
            "SELECT"
          ],
          [
            "userB",
            "SELECT"
          ]
        ]
      },
      "name": "VA1234",
      "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/servers/myServer/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
      "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
    }
  ]
}

Set baseline rules on a resource (using databaseName parameter) - Synapse

Sample request

HTTP

POST https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Synapse/workspaces/myWorkspace/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules?databaseName=master&api-version=2026-04-01-preview

{
  "latestScan": true,
  "results": {}
}

Sample response

Status code:: 200

{
  "value": [
    {
      "properties": {
        "results": [
          [
            "userA",
            "SELECT"
          ],
          [
            "userB",
            "SELECT"
          ]
        ]
      },
      "name": "VA1234",
      "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Synapse/workspaces/myWorkspace/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
      "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
    }
  ]
}

Set baseline rules on a resource - Arc Machine

Sample request

HTTP

POST https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.HybridCompute/machines/MyMachine/sqlServers/server1/databases/master/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules?api-version=2026-04-01-preview

{
  "latestScan": true,
  "results": {}
}

Sample response

Status code:: 200

{
  "value": [
    {
      "properties": {
        "results": [
          [
            "userA",
            "SELECT"
          ],
          [
            "userB",
            "SELECT"
          ]
        ]
      },
      "name": "VA1234",
      "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.HybridCompute/machines/MyMachine/sqlServers/server1/databases/master/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
      "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
    }
  ]
}

Set baseline rules on a resource - Sql Managed Instance

Sample request

HTTP

POST https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/managedInstances/myManagedInstance/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules?api-version=2026-04-01-preview

{
  "latestScan": true,
  "results": {}
}

Sample response

Status code:: 200

{
  "value": [
    {
      "properties": {
        "results": [
          [
            "userA",
            "SELECT"
          ],
          [
            "userB",
            "SELECT"
          ]
        ]
      },
      "name": "VA1234",
      "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/managedInstances/myManagedInstance/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
      "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
    }
  ]
}

Set baseline rules on a resource - Sql Server

Sample request

HTTP

POST https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/servers/myServer/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules?api-version=2026-04-01-preview

{
  "latestScan": true,
  "results": {}
}

Sample response

Status code:: 200

{
  "value": [
    {
      "properties": {
        "results": [
          [
            "userA",
            "SELECT"
          ],
          [
            "userB",
            "SELECT"
          ]
        ]
      },
      "name": "VA1234",
      "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/servers/myServer/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
      "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
    }
  ]
}

Set baseline rules on a resource - Synapse

Sample request

HTTP

POST https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Synapse/workspaces/myWorkspace/sqlPools/myPool/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules?api-version=2026-04-01-preview

{
  "latestScan": true,
  "results": {}
}

Sample response

Status code:: 200

{
  "value": [
    {
      "properties": {
        "results": [
          [
            "userA",
            "SELECT"
          ],
          [
            "userB",
            "SELECT"
          ]
        ]
      },
      "name": "VA1234",
      "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Synapse/workspaces/myWorkspace/sqlPools/myPool/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
      "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
    }
  ]
}

Set baseline rules on a resource - Virtual Machine

Sample request

HTTP

POST https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Compute/virtualMachines/myVm/sqlServers/server1/databases/master/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules?api-version=2026-04-01-preview

{
  "latestScan": true,
  "results": {}
}

Sample response

Status code:: 200

{
  "value": [
    {
      "properties": {
        "results": [
          [
            "userA",
            "SELECT"
          ],
          [
            "userB",
            "SELECT"
          ]
        ]
      },
      "name": "VA1234",
      "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Compute/virtualMachines/myVm/sqlServers/server1/databases/master/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
      "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
    }
  ]
}

Definitions

Name	Description
CloudError	Common error response for all Azure Resource Manager APIs to return error details for failed operations. (This also follows the OData error response format.).
CloudErrorBody	The error detail.
ErrorAdditionalInfo	The resource management error additional info.
RuleResults	Rule results.
RuleResultsProperties	Rule results properties.
RulesResults	A list of rules results.
RulesResultsInput	Rules results input.

CloudError

Object

Common error response for all Azure Resource Manager APIs to return error details for failed operations. (This also follows the OData error response format.).

Name	Type	Description
error.additionalInfo	ErrorAdditionalInfo[]	The error additional info.
error.code	string	The error code.
error.details	CloudErrorBody[]	The error details.
error.message	string	The error message.
error.target	string	The error target.

CloudErrorBody

Object

The error detail.

Name	Type	Description
additionalInfo	ErrorAdditionalInfo[]	The error additional info.
code	string	The error code.
details	CloudErrorBody[]	The error details.
message	string	The error message.
target	string	The error target.

ErrorAdditionalInfo

Object

The resource management error additional info.

Name	Type	Description
info	object	The additional info.
type	string	The additional info type.

RuleResults

Object

Rule results.

Name	Type	Description
id	string	Resource Id
name	string	Resource name
properties	RuleResultsProperties	Rule results properties.
type	string	Resource type

RuleResultsProperties

Object

Rule results properties.

Name	Type	Description
latestScan	boolean	Take results from latest scan.
results	string[]	Expected results in the baseline.

RulesResults

Object

A list of rules results.

Name	Type	Description
value	RuleResults[]	List of rule results.

RulesResultsInput

Object

Rules results input.

Name	Type	Description
latestScan	boolean	Take results from latest scan.
results	object	Expected results to be inserted into the baseline. Leave this field empty if latestScan == true.