Sql Vulnerability Assessment Baseline Rules - Get

Service:: Defender for Cloud

API Version:: 2026-04-01-preview

Gets the results for a given rule in the Baseline.

GET https://management.azure.com/{resourceId}/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/{ruleId}?api-version=2026-04-01-preview

With optional parameters:

GET https://management.azure.com/{resourceId}/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/{ruleId}?databaseName={databaseName}&api-version=2026-04-01-preview

URI Parameters

Name	In	Required	Type	Description
resourceId	path	True	string	The identifier of the resource.
ruleId	path	True	string	The rule Id.
api-version	query	True	string	The api version.
databaseName	query		string	The name of the database to assess. Required when the API is called on the parent resource (e.g., server level) rather than on a specific database resource, since the database name is not part of the resource URI. This is the only way to assess system databases (e.g., master), which cannot be referenced directly in the resource URI.

Responses

Name	Type	Description
200 OK	RuleResults	Successfully got the vulnerability assessment rule baseline.
Other Status Codes	CloudError	Error response describing why the operation failed.

Security

azure_auth

Azure Active Directory OAuth2 Flow

Type: oauth2
Flow: implicit
Authorization URL: https://login.microsoftonline.com/common/oauth2/authorize

Scopes

Name	Description
user_impersonation	impersonate your user account

Examples

Get a baseline rule on a resource (using databaseName parameter) - Sql Managed Instance

Get a baseline rule on a resource (using databaseName parameter) - Sql Server

Get a baseline rule on a resource (using databaseName parameter) - Synapse

Get a baseline rule on a resource - Arc Machine

Get a baseline rule on a resource - Sql Managed Instance

Get a baseline rule on a resource - Sql Server

Get a baseline rule on a resource - Synapse

Get a baseline rule on a resource - Virtual Machine

Get a baseline rule on a resource (using databaseName parameter) - Sql Managed Instance

Sample request

HTTP

GET https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/managedInstances/myManagedInstance/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234?databaseName=master&api-version=2026-04-01-preview

Sample response

Status code:: 200

{
  "properties": {
    "results": [
      [
        "userA",
        "SELECT"
      ],
      [
        "userB",
        "SELECT"
      ]
    ]
  },
  "name": "VA1234",
  "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/managedInstances/myManagedInstance/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
  "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
}

Get a baseline rule on a resource (using databaseName parameter) - Sql Server

Sample request

HTTP

GET https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/servers/myServer/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234?databaseName=master&api-version=2026-04-01-preview

Sample response

Status code:: 200

{
  "properties": {
    "results": [
      [
        "userA",
        "SELECT"
      ],
      [
        "userB",
        "SELECT"
      ]
    ]
  },
  "name": "VA1234",
  "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/servers/myServer/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
  "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
}

Get a baseline rule on a resource (using databaseName parameter) - Synapse

Sample request

HTTP

GET https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Synapse/workspaces/myWorkspace/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234?databaseName=master&api-version=2026-04-01-preview

Sample response

Status code:: 200

{
  "properties": {
    "results": [
      [
        "userA",
        "SELECT"
      ],
      [
        "userB",
        "SELECT"
      ]
    ]
  },
  "name": "VA1234",
  "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Synapse/workspaces/myWorkspace/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
  "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
}

Get a baseline rule on a resource - Arc Machine

Sample request

HTTP

GET https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.HybridCompute/machines/MyMachine/sqlServers/server1/databases/master/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234?api-version=2026-04-01-preview

Sample response

Status code:: 200

{
  "properties": {
    "results": [
      [
        "userA",
        "SELECT"
      ],
      [
        "userB",
        "SELECT"
      ]
    ]
  },
  "name": "VA1234",
  "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.HybridCompute/machines/MyMachine/sqlServers/server1/databases/master/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
  "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
}

Get a baseline rule on a resource - Sql Managed Instance

Sample request

HTTP

GET https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/managedInstances/myManagedInstance/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234?api-version=2026-04-01-preview

Sample response

Status code:: 200

{
  "properties": {
    "results": [
      [
        "userA",
        "SELECT"
      ],
      [
        "userB",
        "SELECT"
      ]
    ]
  },
  "name": "VA1234",
  "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/managedInstances/myManagedInstance/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
  "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
}

Get a baseline rule on a resource - Sql Server

Sample request

HTTP

GET https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/servers/myServer/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234?api-version=2026-04-01-preview

Sample response

Status code:: 200

{
  "properties": {
    "results": [
      [
        "userA",
        "SELECT"
      ],
      [
        "userB",
        "SELECT"
      ]
    ]
  },
  "name": "VA1234",
  "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/servers/myServer/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
  "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
}

Get a baseline rule on a resource - Synapse

Sample request

HTTP

GET https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Synapse/workspaces/myWorkspace/sqlPools/myPool/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234?api-version=2026-04-01-preview

Sample response

Status code:: 200

{
  "properties": {
    "results": [
      [
        "userA",
        "SELECT"
      ],
      [
        "userB",
        "SELECT"
      ]
    ]
  },
  "name": "VA1234",
  "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Synapse/workspaces/myWorkspace/sqlPools/myPool/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
  "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
}

Get a baseline rule on a resource - Virtual Machine

Sample request

HTTP

GET https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Compute/virtualMachines/myVm/sqlServers/server1/databases/master/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234?api-version=2026-04-01-preview

Sample response

Status code:: 200

{
  "properties": {
    "results": [
      [
        "userA",
        "SELECT"
      ],
      [
        "userB",
        "SELECT"
      ]
    ]
  },
  "name": "VA1234",
  "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Compute/virtualMachines/myVm/sqlServers/server1/databases/master/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
  "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
}

Definitions

Name	Description
CloudError	Common error response for all Azure Resource Manager APIs to return error details for failed operations. (This also follows the OData error response format.).
CloudErrorBody	The error detail.
ErrorAdditionalInfo	The resource management error additional info.
RuleResults	Rule results.
RuleResultsProperties	Rule results properties.

CloudError

Object

Common error response for all Azure Resource Manager APIs to return error details for failed operations. (This also follows the OData error response format.).

Name	Type	Description
error.additionalInfo	ErrorAdditionalInfo[]	The error additional info.
error.code	string	The error code.
error.details	CloudErrorBody[]	The error details.
error.message	string	The error message.
error.target	string	The error target.

CloudErrorBody

Object

The error detail.

Name	Type	Description
additionalInfo	ErrorAdditionalInfo[]	The error additional info.
code	string	The error code.
details	CloudErrorBody[]	The error details.
message	string	The error message.
target	string	The error target.

ErrorAdditionalInfo

Object

The resource management error additional info.

Name	Type	Description
info	object	The additional info.
type	string	The additional info type.

RuleResults

Object

Rule results.

Name	Type	Description
id	string	Resource Id
name	string	Resource name
properties	RuleResultsProperties	Rule results properties.
type	string	Resource type

RuleResultsProperties

Object

Rule results properties.

Name	Type	Description
latestScan	boolean	Take results from latest scan.
results	string[]	Expected results in the baseline.