SLIDES

The slides can be downloaded via the link below, so that you can view them again at home.
It could well be that it was a lot of information in 20 minutes. If you have any questions, be sure to let me know.

SQLBits presentation

During the session we discussed a number of tables where the policies are stored. Below is an overview of the different options

— Lists generally supported actions
SELECT * FROM sys.dm_server_external_policy_actions

— Lists the roles that are part of a policy published to this server
SELECT * FROM sys.dm_server_external_policy_roles

— Lists the links between the roles and actions, could be used to join the two
SELECT * FROM sys.dm_server_external_policy_role_actions

— Lists all Azure AD principals that were given connect permissions
SELECT * FROM sys.dm_server_external_policy_principals

— Lists Azure AD principals assigned to a given role on a given resource scope
SELECT * FROM sys.dm_server_external_policy_role_members

— Lists Azure AD principals, joined with roles, joined with their data actions
SELECT * FROM sys.dm_server_external_policy_principal_assigned_actions

— Force immediate download of latest published policies
exec sp_external_policy_refresh reload

Feel free to leave a comment