Sql Vulnerability Assessment Baseline Rules - Create Or Update

Service:: Defender for Cloud

API Version:: 2026-04-01-preview

Creates a Baseline for a rule in a database. Will overwrite any previously existing results.

PUT https://management.azure.com/{resourceId}/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/{ruleId}?api-version=2026-04-01-preview

With optional parameters:

PUT https://management.azure.com/{resourceId}/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/{ruleId}?databaseName={databaseName}&api-version=2026-04-01-preview

URI Parameters

Name	In	Required	Type	Description
resourceId	path	True	string	The identifier of the resource.
ruleId	path	True	string	The rule Id.
api-version	query	True	string	The api version.
databaseName	query		string	The name of the database to assess. Required when the API is called on the parent resource (e.g., server level) rather than on a specific database resource, since the database name is not part of the resource URI. This is the only way to assess system databases (e.g., master), which cannot be referenced directly in the resource URI.

Request Body

Name	Type	Description
latestScan	boolean	Take results from latest scan.
results	string[]	Expected results to be inserted into the baseline. Leave this field empty if latestScan == true.

Responses

Name	Type	Description
200 OK	RuleResults	Successfully set the vulnerability assessment rule baseline.
201 Created	RuleResults	Successfully created the vulnerability assessment rule baseline.
Other Status Codes	CloudError	Error response describing why the operation failed.

Security

azure_auth

Azure Active Directory OAuth2 Flow

Type: oauth2
Flow: implicit
Authorization URL: https://login.microsoftonline.com/common/oauth2/authorize

Scopes

Name	Description
user_impersonation	impersonate your user account

Examples

Create a baseline for a rule on a resource (using databaseName parameter) - Sql Managed Instance

Create a baseline for a rule on a resource (using databaseName parameter) - Sql Server

Create a baseline for a rule on a resource (using databaseName parameter) - Synapse

Create a baseline for a rule on a resource - Arc Machine

Create a baseline for a rule on a resource - Sql Managed Instance

Create a baseline for a rule on a resource - Sql Server

Create a baseline for a rule on a resource - Synapse

Create a baseline for a rule on a resource - Virtual Machine

Create a baseline for a rule on a resource (using databaseName parameter) - Sql Managed Instance

Sample request

HTTP

PUT https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/managedInstances/myManagedInstance/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234?databaseName=master&api-version=2026-04-01-preview

{
  "latestScan": false,
  "results": [
    [
      "userA",
      "SELECT"
    ],
    [
      "userB",
      "SELECT"
    ]
  ]
}

Sample response

Status code:: 200

{
  "properties": {
    "results": [
      [
        "userA",
        "SELECT"
      ],
      [
        "userB",
        "SELECT"
      ]
    ]
  },
  "name": "VA1234",
  "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/managedInstances/myManagedInstance/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
  "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
}

Status code:: 201

{
  "properties": {
    "results": [
      [
        "userA",
        "SELECT"
      ],
      [
        "userB",
        "SELECT"
      ]
    ]
  },
  "name": "VA1234",
  "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/managedInstances/myManagedInstance/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
  "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
}

Create a baseline for a rule on a resource (using databaseName parameter) - Sql Server

Sample request

HTTP

PUT https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/servers/myServer/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234?databaseName=master&api-version=2026-04-01-preview

{
  "latestScan": false,
  "results": [
    [
      "userA",
      "SELECT"
    ],
    [
      "userB",
      "SELECT"
    ]
  ]
}

Sample response

Status code:: 200

{
  "properties": {
    "results": [
      [
        "userA",
        "SELECT"
      ],
      [
        "userB",
        "SELECT"
      ]
    ]
  },
  "name": "VA1234",
  "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/servers/myServer/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
  "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
}

Status code:: 201

{
  "properties": {
    "results": [
      [
        "userA",
        "SELECT"
      ],
      [
        "userB",
        "SELECT"
      ]
    ]
  },
  "name": "VA1234",
  "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/servers/myServer/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
  "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
}

Create a baseline for a rule on a resource (using databaseName parameter) - Synapse

Sample request

HTTP

PUT https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Synapse/workspaces/myWorkspace/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234?databaseName=master&api-version=2026-04-01-preview

{
  "latestScan": false,
  "results": [
    [
      "userA",
      "SELECT"
    ],
    [
      "userB",
      "SELECT"
    ]
  ]
}

Sample response

Status code:: 200

{
  "properties": {
    "results": [
      [
        "userA",
        "SELECT"
      ],
      [
        "userB",
        "SELECT"
      ]
    ]
  },
  "name": "VA1234",
  "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Synapse/workspaces/myWorkspace/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
  "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
}

Status code:: 201

{
  "properties": {
    "results": [
      [
        "userA",
        "SELECT"
      ],
      [
        "userB",
        "SELECT"
      ]
    ]
  },
  "name": "VA1234",
  "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Synapse/workspaces/myWorkspace/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
  "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
}

Create a baseline for a rule on a resource - Arc Machine

Sample request

HTTP

PUT https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.HybridCompute/machines/MyMachine/sqlServers/server1/databases/master/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234?api-version=2026-04-01-preview

{
  "latestScan": false,
  "results": [
    [
      "userA",
      "SELECT"
    ],
    [
      "userB",
      "SELECT"
    ]
  ]
}

Sample response

Status code:: 200

{
  "properties": {
    "results": [
      [
        "userA",
        "SELECT"
      ],
      [
        "userB",
        "SELECT"
      ]
    ]
  },
  "name": "VA1234",
  "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.HybridCompute/machines/MyMachine/sqlServers/server1/databases/master/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
  "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
}

Status code:: 201

{
  "properties": {
    "results": [
      [
        "userA",
        "SELECT"
      ],
      [
        "userB",
        "SELECT"
      ]
    ]
  },
  "name": "VA1234",
  "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.HybridCompute/machines/MyMachine/sqlServers/server1/databases/master/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
  "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
}

Create a baseline for a rule on a resource - Sql Managed Instance

Sample request

HTTP

PUT https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/managedInstances/myManagedInstance/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234?api-version=2026-04-01-preview

{
  "latestScan": false,
  "results": [
    [
      "userA",
      "SELECT"
    ],
    [
      "userB",
      "SELECT"
    ]
  ]
}

Sample response

Status code:: 200

{
  "properties": {
    "results": [
      [
        "userA",
        "SELECT"
      ],
      [
        "userB",
        "SELECT"
      ]
    ]
  },
  "name": "VA1234",
  "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/managedInstances/myManagedInstance/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
  "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
}

Status code:: 201

{
  "properties": {
    "results": [
      [
        "userA",
        "SELECT"
      ],
      [
        "userB",
        "SELECT"
      ]
    ]
  },
  "name": "VA1234",
  "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/managedInstances/myManagedInstance/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
  "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
}

Create a baseline for a rule on a resource - Sql Server

Sample request

HTTP

PUT https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/servers/myServer/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234?api-version=2026-04-01-preview

{
  "latestScan": false,
  "results": [
    [
      "userA",
      "SELECT"
    ],
    [
      "userB",
      "SELECT"
    ]
  ]
}

Sample response

Status code:: 200

{
  "properties": {
    "results": [
      [
        "userA",
        "SELECT"
      ],
      [
        "userB",
        "SELECT"
      ]
    ]
  },
  "name": "VA1234",
  "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/servers/myServer/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
  "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
}

Status code:: 201

{
  "properties": {
    "results": [
      [
        "userA",
        "SELECT"
      ],
      [
        "userB",
        "SELECT"
      ]
    ]
  },
  "name": "VA1234",
  "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/servers/myServer/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
  "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
}

Create a baseline for a rule on a resource - Synapse

Sample request

HTTP

PUT https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Synapse/workspaces/myWorkspace/sqlPools/myPool/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234?api-version=2026-04-01-preview

{
  "latestScan": false,
  "results": [
    [
      "userA",
      "SELECT"
    ],
    [
      "userB",
      "SELECT"
    ]
  ]
}

Sample response

Status code:: 200

{
  "properties": {
    "results": [
      [
        "userA",
        "SELECT"
      ],
      [
        "userB",
        "SELECT"
      ]
    ]
  },
  "name": "VA1234",
  "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Synapse/workspaces/myWorkspace/sqlPools/myPool/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
  "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
}

Status code:: 201

{
  "properties": {
    "results": [
      [
        "userA",
        "SELECT"
      ],
      [
        "userB",
        "SELECT"
      ]
    ]
  },
  "name": "VA1234",
  "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Synapse/workspaces/myWorkspace/sqlPools/myPool/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
  "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
}

Create a baseline for a rule on a resource - Virtual Machine

Sample request

HTTP

PUT https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Compute/virtualMachines/myVm/sqlServers/server1/databases/master/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234?api-version=2026-04-01-preview

{
  "latestScan": false,
  "results": [
    [
      "userA",
      "SELECT"
    ],
    [
      "userB",
      "SELECT"
    ]
  ]
}

Sample response

Status code:: 200

{
  "properties": {
    "results": [
      [
        "userA",
        "SELECT"
      ],
      [
        "userB",
        "SELECT"
      ]
    ]
  },
  "name": "VA1234",
  "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Compute/virtualMachines/myVm/sqlServers/server1/databases/master/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
  "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
}

Status code:: 201

{
  "properties": {
    "results": [
      [
        "userA",
        "SELECT"
      ],
      [
        "userB",
        "SELECT"
      ]
    ]
  },
  "name": "VA1234",
  "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Compute/virtualMachines/myVm/sqlServers/server1/databases/master/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
  "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
}

Definitions

Name	Description
CloudError	Common error response for all Azure Resource Manager APIs to return error details for failed operations. (This also follows the OData error response format.).
CloudErrorBody	The error detail.
ErrorAdditionalInfo	The resource management error additional info.
RuleResults	Rule results.
RuleResultsInput	Rule results input.
RuleResultsProperties	Rule results properties.

CloudError

Object

Common error response for all Azure Resource Manager APIs to return error details for failed operations. (This also follows the OData error response format.).

Name	Type	Description
error.additionalInfo	ErrorAdditionalInfo[]	The error additional info.
error.code	string	The error code.
error.details	CloudErrorBody[]	The error details.
error.message	string	The error message.
error.target	string	The error target.

CloudErrorBody

Object

The error detail.

Name	Type	Description
additionalInfo	ErrorAdditionalInfo[]	The error additional info.
code	string	The error code.
details	CloudErrorBody[]	The error details.
message	string	The error message.
target	string	The error target.

ErrorAdditionalInfo

Object

The resource management error additional info.

Name	Type	Description
info	object	The additional info.
type	string	The additional info type.

RuleResults

Object

Rule results.

Name	Type	Description
id	string	Resource Id
name	string	Resource name
properties	RuleResultsProperties	Rule results properties.
type	string	Resource type

RuleResultsInput

Object

Rule results input.

Name	Type	Description
latestScan	boolean	Take results from latest scan.
results	string[]	Expected results to be inserted into the baseline. Leave this field empty if latestScan == true.

RuleResultsProperties

Object

Rule results properties.

Name	Type	Description
latestScan	boolean	Take results from latest scan.
results	string[]	Expected results in the baseline.