Sql Vulnerability Assessment Baseline Rules - List

Service:: Defender for Cloud

API Version:: 2026-04-01-preview

Gets the results for all rules in the Baseline.

GET https://management.azure.com/{resourceId}/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules?api-version=2026-04-01-preview

With optional parameters:

GET https://management.azure.com/{resourceId}/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules?databaseName={databaseName}&api-version=2026-04-01-preview

URI Parameters

Name	In	Required	Type	Description
resourceId	path	True	string	The identifier of the resource.
api-version	query	True	string	The api version.
databaseName	query		string	The name of the database to assess. Required when the API is called on the parent resource (e.g., server level) rather than on a specific database resource, since the database name is not part of the resource URI. This is the only way to assess system databases (e.g., master), which cannot be referenced directly in the resource URI.

Responses

Name	Type	Description
200 OK	RulesResults	Successfully retrieved the database vulnerability assessment rule baselines.
Other Status Codes	CloudError	Error response describing why the operation failed.

Security

azure_auth

Azure Active Directory OAuth2 Flow

Type: oauth2
Flow: implicit
Authorization URL: https://login.microsoftonline.com/common/oauth2/authorize

Scopes

Name	Description
user_impersonation	impersonate your user account

Examples

List baseline rules on a resource (using databaseName parameter) - Sql Managed Instance

List baseline rules on a resource (using databaseName parameter) - Sql Server

List baseline rules on a resource (using databaseName parameter) - Synapse

List baseline rules on a resource - Arc Machine

List baseline rules on a resource - Sql Managed Instance

List baseline rules on a resource - Sql Server

List baseline rules on a resource - Synapse

List baseline rules on a resource - Virtual Machine

List baseline rules on a resource (using databaseName parameter) - Sql Managed Instance

Sample request

HTTP

GET https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/managedInstances/myManagedInstance/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules?databaseName=master&api-version=2026-04-01-preview

Sample response

Status code:: 200

{
  "value": [
    {
      "properties": {
        "results": [
          [
            "userA",
            "SELECT"
          ],
          [
            "userB",
            "SELECT"
          ]
        ]
      },
      "name": "VA1234",
      "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/managedInstances/myManagedInstance/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
      "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
    }
  ]
}

List baseline rules on a resource (using databaseName parameter) - Sql Server

Sample request

HTTP

GET https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/servers/myServer/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules?databaseName=master&api-version=2026-04-01-preview

Sample response

Status code:: 200

{
  "value": [
    {
      "properties": {
        "results": [
          [
            "userA",
            "SELECT"
          ],
          [
            "userB",
            "SELECT"
          ]
        ]
      },
      "name": "VA1234",
      "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/servers/myServer/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
      "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
    }
  ]
}

List baseline rules on a resource (using databaseName parameter) - Synapse

Sample request

HTTP

GET https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Synapse/workspaces/myWorkspace/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules?databaseName=master&api-version=2026-04-01-preview

Sample response

Status code:: 200

{
  "value": [
    {
      "properties": {
        "results": [
          [
            "userA",
            "SELECT"
          ],
          [
            "userB",
            "SELECT"
          ]
        ]
      },
      "name": "VA1234",
      "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Synapse/workspaces/myWorkspace/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
      "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
    }
  ]
}

List baseline rules on a resource - Arc Machine

Sample request

HTTP

GET https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.HybridCompute/machines/MyMachine/sqlServers/server1/databases/master/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules?api-version=2026-04-01-preview

Sample response

Status code:: 200

{
  "value": [
    {
      "properties": {
        "results": [
          [
            "userA",
            "SELECT"
          ],
          [
            "userB",
            "SELECT"
          ]
        ]
      },
      "name": "VA1234",
      "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.HybridCompute/machines/MyMachine/sqlServers/server1/databases/master/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
      "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
    }
  ]
}

List baseline rules on a resource - Sql Managed Instance

Sample request

HTTP

GET https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/managedInstances/myManagedInstance/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules?api-version=2026-04-01-preview

Sample response

Status code:: 200

{
  "value": [
    {
      "properties": {
        "results": [
          [
            "userA",
            "SELECT"
          ],
          [
            "userB",
            "SELECT"
          ]
        ]
      },
      "name": "VA1234",
      "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/managedInstances/myManagedInstance/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
      "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
    }
  ]
}

List baseline rules on a resource - Sql Server

Sample request

HTTP

GET https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/servers/myServer/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules?api-version=2026-04-01-preview

Sample response

Status code:: 200

{
  "value": [
    {
      "properties": {
        "results": [
          [
            "userA",
            "SELECT"
          ],
          [
            "userB",
            "SELECT"
          ]
        ]
      },
      "name": "VA1234",
      "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Sql/servers/myServer/databases/db/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
      "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
    }
  ]
}

List baseline rules on a resource - Synapse

Sample request

HTTP

GET https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Synapse/workspaces/myWorkspace/sqlPools/myPool/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules?api-version=2026-04-01-preview

Sample response

Status code:: 200

{
  "value": [
    {
      "properties": {
        "results": [
          [
            "userA",
            "SELECT"
          ],
          [
            "userB",
            "SELECT"
          ]
        ]
      },
      "name": "VA1234",
      "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Synapse/workspaces/myWorkspace/sqlPools/myPool/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
      "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
    }
  ]
}

List baseline rules on a resource - Virtual Machine

Sample request

HTTP

GET https://management.azure.com/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Compute/virtualMachines/myVm/sqlServers/server1/databases/master/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules?api-version=2026-04-01-preview

Sample response

Status code:: 200

{
  "value": [
    {
      "properties": {
        "results": [
          [
            "userA",
            "SELECT"
          ],
          [
            "userB",
            "SELECT"
          ]
        ]
      },
      "name": "VA1234",
      "id": "/subscriptions/00000000-1111-2222-3333-444444444444/resourceGroups/Rg/providers/Microsoft.Compute/virtualMachines/myVm/sqlServers/server1/databases/master/providers/Microsoft.Security/sqlVulnerabilityAssessments/default/baselineRules/VA1234",
      "type": "Microsoft.Security/sqlVulnerabilityAssessments/baselineRules"
    }
  ]
}

Definitions

Name	Description
CloudError	Common error response for all Azure Resource Manager APIs to return error details for failed operations. (This also follows the OData error response format.).
CloudErrorBody	The error detail.
ErrorAdditionalInfo	The resource management error additional info.
RuleResults	Rule results.
RuleResultsProperties	Rule results properties.
RulesResults	A list of rules results.

CloudError

Object

Common error response for all Azure Resource Manager APIs to return error details for failed operations. (This also follows the OData error response format.).

Name	Type	Description
error.additionalInfo	ErrorAdditionalInfo[]	The error additional info.
error.code	string	The error code.
error.details	CloudErrorBody[]	The error details.
error.message	string	The error message.
error.target	string	The error target.

CloudErrorBody

Object

The error detail.

Name	Type	Description
additionalInfo	ErrorAdditionalInfo[]	The error additional info.
code	string	The error code.
details	CloudErrorBody[]	The error details.
message	string	The error message.
target	string	The error target.

ErrorAdditionalInfo

Object

The resource management error additional info.

Name	Type	Description
info	object	The additional info.
type	string	The additional info type.

RuleResults

Object

Rule results.

Name	Type	Description
id	string	Resource Id
name	string	Resource name
properties	RuleResultsProperties	Rule results properties.
type	string	Resource type

RuleResultsProperties

Object

Rule results properties.

Name	Type	Description
latestScan	boolean	Take results from latest scan.
results	string[]	Expected results in the baseline.

RulesResults

Object

A list of rules results.

Name	Type	Description
value	RuleResults[]	List of rule results.