Assessment rules for SQL Server to Azure SQL Managed Instance migration
Applies to: 
Azure SQL Managed Instance
Migration tools validate your source SQL Server instance by running several assessment rules. The rules identify issues that must be addressed before migrating your SQL Server database to Azure SQL Managed Instance.
This article provides a list of the rules used to assess the feasibility of migrating your SQL Server database to Azure SQL Managed Instance.
Rules summary
AnalysisCommand job
Title: AnalysisCommand job step is not supported in Azure SQL Managed Instance.
Category: Warning
Description
It is a job step that runs an Analysis Services command. AnalysisCommand job step isn't supported in Azure SQL Managed Instance.
Recommendation
Review affected objects section in Azure Migrate to see all jobs using Analysis Service Command job step and evaluate if the job step or the affected object can be removed. Alternatively, migrate to SQL Server on Azure VMs.
More information: SQL Server Agent differences in Azure SQL Managed Instance
AnalysisQuery job
Title: AnalysisQuery job step is not supported in Azure SQL Managed Instance.
Category: Warning
Description
It is a job step that runs an Analysis Services query. AnalysisQuery job step isn't supported in Azure SQL Managed Instance.
Recommendation
Review affected objects section in Azure Migrate to see all jobs using Analysis Service Query job step and evaluate if the job step or the affected object can be removed. Alternatively, migrate to SQL Server on Azure VMs.
More information: SQL Server Agent differences in Azure SQL Managed Instance
Assembly from file
Title: 'CREATE ASSEMBLY' and 'ALTER ASSEMBLY' with a file parameter are unsupported in Azure SQL Managed Instance.
Category: Issue
Description
Azure SQL Managed Instance doesn't support CREATE ASSEMBLY or ALTER ASSEMBLY with a file parameter. A binary parameter is supported. See the Affected Objects section for the specific object where the file parameter is used.
Recommendation
Review objects using CREATE ASSEMBLY or ALTER ASSEMBLY with a file parameter. If any such objects that are required, convert the file parameter to a binary parameter. Alternatively, migrate to SQL Server on Azure VMs.
More information: CLR differences in Azure SQL Managed Instance
BULK INSERT
Title: BULK INSERT with non-Azure blob data source is not supported in Azure SQL Managed Instance.
Category: Issue
Description
Azure SQL Managed Instance can't access file shares or Windows folders. See the "Affected Objects" section for the specific uses of BULK INSERT statements that don't reference an Azure blob. Objects with 'BULK INSERT' where the source isn't Azure Blob Storage doesn't work after migrating to Azure SQL Managed Instance.
Recommendation
You need to convert BULK INSERT statements that use local files or file shares to use files from Azure Blob Storage instead, when migrating to Azure SQL Managed Instance.
More information: Bulk Insert and OPENROWSET differences in Azure SQL Managed Instance
CLR security
Title: CLR assemblies marked as SAFE or EXTERNAL_ACCESS are considered UNSAFE
Category: Warning
Description
CLR Strict Security mode is enforced in Azure SQL Managed Instance. This mode is enabled by default and introduces breaking changes for databases containing user-defined CLR assemblies marked either SAFE or EXTERNAL_ACCESS.
Recommendation
CLR uses Code Access Security (CAS) in the .NET Framework, which is no longer supported as a security boundary. A CLR assembly created with PERMISSION_SET = SAFE might be able to access external system resources, call unmanaged code, and acquire sysadmin privileges. In SQL Server 2017 (14.x) and later versions, the sp_configure option, clr strict security, enhances the security of CLR assemblies. clr strict security is enabled by default, and treats SAFE and EXTERNAL_ACCESS assemblies as if they were marked UNSAFE. The clr strict security option can be disabled for backward compatibility, but isn't recommended.
We recommend that you sign all assemblies by a certificate or asymmetric key, with a corresponding login that has been granted UNSAFE ASSEMBLY permission in the master database. SQL Server administrators can also add assemblies to a list of assemblies, which the Database Engine should trust. For more information, see sys.sp_add_trusted_assembly.
COMPUTE clause
Title: COMPUTE clause is no longer supported and has been removed.
Category: Warning
Description
The COMPUTE clause generates totals that appear as additional summary columns at the end of the result set. However, this clause is no longer supported in Azure SQL Managed Instance.
Recommendation
The T-SQL module needs to be rewritten using the ROLLUP operator instead. The following code demonstrates how COMPUTE can be replaced with ROLLUP:
USE AdventureWorks2022;
GO
SELECT SalesOrderID,
UnitPrice,
UnitPriceDiscount
FROM Sales.SalesOrderDetail
ORDER BY SalesOrderID COMPUTE SUM(UnitPrice),
SUM(UnitPriceDiscount) BY SalesOrderID;
GO
SELECT SalesOrderID,
UnitPrice,
UnitPriceDiscount,
SUM(UnitPrice) AS UnitPrice,
SUM(UnitPriceDiscount) AS UnitPriceDiscount
FROM Sales.SalesOrderDetail
GROUP BY SalesOrderID,
UnitPrice,
UnitPriceDiscount
WITH ROLLUP;
More information: Discontinued Database Engine Functionality in SQL Server
Cryptographic provider
Title: A use of CREATE CRYPTOGRAPHIC PROVIDER or ALTER CRYPTOGRAPHIC PROVIDER was found, which is not supported in Azure SQL Managed Instance.
Category: Issue
Description
Azure SQL Managed Instance doesn't support CRYPTOGRAPHIC PROVIDER statements because it can't access files. See the Affected Objects section for the specific uses of CRYPTOGRAPHIC PROVIDER statements. Objects with 'CREATE CRYPTOGRAPHIC PROVIDER' or 'ALTER CRYPTOGRAPHIC PROVIDER' doesn't work correctly after migrating to Azure SQL Managed Instance.
Recommendation
Review objects with 'CREATE CRYPTOGRAPHIC PROVIDER' or 'ALTER CRYPTOGRAPHIC PROVIDER'. In any such objects that are required, remove the uses of these features. Alternatively, migrate to SQL Server on Azure VMs.
More information: Cryptographic provider differences in Azure SQL Managed Instance
Database compatibility
Title: Database compatibility level below 100 is not supported
Category: Warning
Description
Database Compatibility Level is a valuable tool to help with database modernization, by allowing the SQL Server Database Engine to be upgraded, while keeping connecting applications functional status by maintaining the same pre-upgrade Database Compatibility Level. Azure SQL Managed Instance doesn't support compatibility levels below 100. When the database with compatibility level below 100 is restored on Azure SQL Managed Instance, the compatibility level is upgraded to 100.
Recommendation
Evaluate if the application functionality is intact when the database compatibility level is upgraded to 100 on Azure SQL Managed Instance. Alternatively, migrate to SQL Server on Azure VMs.
More information: Supported compatibility levels in Azure SQL Managed Instance
Database principal alias
Title: SYS.DATABASE_PRINCIPAL_ALIASES is no longer supported and has been removed.
Category: Issue
Description
sys.database_principal_aliases is no longer supported and has been removed in Azure SQL Managed Instance.
Recommendation
Use roles instead of aliases.
More information: Discontinued Database Engine Functionality in SQL Server
DISABLE_DEF_CNST_CHK option
Title: SET option DISABLE_DEF_CNST_CHK is no longer supported and has been removed.
Category: Issue
Description
SET option DISABLE_DEF_CNST_CHK is no longer supported and has been removed in Azure SQL Managed Instance.
More information: Discontinued Database Engine Functionality in SQL Server
FASTFIRSTROW hint
Title: FASTFIRSTROW query hint is no longer supported and has been removed.
Category: Warning
Description
FASTFIRSTROW query hint is no longer supported and has been removed in Azure SQL Managed Instance.
Recommendation
Instead of FASTFIRSTROW query hint use OPTION (FAST n).
More information: Discontinued Database Engine Functionality in SQL Server
FILESTREAM
Title: FILESTREAM and FileTable are not supported in Azure SQL Managed Instance.
Category: Issue
Description
The FILESTREAM feature, which allows you to store unstructured data such as text documents, images, and videos in NTFS file system, isn't supported in Azure SQL Managed Instance. This database can't be migrated as the backup containing FILESTREAM filegroups can't be restored on Azure SQL Managed Instance.
Recommendation
Upload the unstructured files to Azure Blob storage and store metadata related to these files (name, type, URL location, storage key etc.) in Azure SQL Managed Instance. You might have to re-engineer your application to enable streaming blobs to and from Azure SQL Managed Instance. Alternatively, migrate to SQL Server on Azure VMs.
More information: Streaming Blobs To and From SQL Azure blog
Heterogeneous MS DTC
Title: BEGIN DISTRIBUTED TRANSACTION with non-SQL Server remote server is not supported in Azure SQL Managed Instance.
Category: Issue
Description
Distributed transaction started by Transact SQL BEGIN DISTRIBUTED TRANSACTION and managed by Microsoft Distributed Transaction Coordinator (MS DTC) isn't supported in Azure SQL Managed Instance if the remote server isn't SQL Server.
Recommendation
Review affected objects section in Azure Migrate to see all objects using BEGIN DISTRUBUTED TRANSACTION. Consider migrating the participant databases to Azure SQL Managed Instance where distributed transactions across multiple instances are supported. For more information, see Transactions across multiple servers for Azure SQL Managed Instance.
Alternatively, migrate to SQL Server on Azure VMs.
Homogenous MS DTC
Title: BEGIN DISTRIBUTED TRANSACTION is supported across multiple servers for Azure SQL Managed Instance.
Category: Issue
Description
Distributed transaction started by Transact SQL BEGIN DISTRIBUTED TRANSACTION and managed by Microsoft Distributed Transaction Coordinator (MS DTC) is supported across multiple servers for Azure SQL Managed Instance.
Recommendation
Review affected objects section in Azure Migrate to see all objects using BEGIN DISTRUBUTED TRANSACTION. Consider migrating the participant databases to Azure SQL Managed Instance where distributed transactions across multiple instances are supported. For more information, see Transactions across multiple servers for Azure SQL Managed Instance.
Alternatively, migrate to SQL Server on Azure VMs.
Linked server (non-SQL provider)
Title: Linked server with non-SQL Server Provider is not supported in Azure SQL Managed Instance.
Category: Issue
Description
Linked servers enable the SQL Server Database Engine to execute commands against OLE DB data sources outside of the instance of SQL Server. Linked server with non-SQL Server Provider isn't supported in Azure SQL Managed Instance.
Recommendation
Azure SQL Managed Instance doesn't support linked server functionality if the remote server provider is non-SQL Server like Oracle, Sybase etc.
The following actions are recommended to eliminate the need for linked servers:
- Identify the dependent databases from remote non-SQL servers and consider moving these into the database being migrated.
- Migrate the dependent databases to supported targets like SQL Managed Instance, SQL Database, Azure Synapse, and SQL Server instances.
- Consider creating linked server between Azure SQL Managed Instance and SQL Server on Azure Virtual Machines (SQL VM). Then from the SQL VM, create a linked server to Oracle, Sybase, etc. This approach does involve two hops but can be used as temporary workaround.
- Alternatively, migrate to SQL Server on Azure VMs.
More information: Linked Server differences in Azure SQL Managed Instance
Merge job
Title: Merge job step is not supported in Azure SQL Managed Instance.
Category: Warning
Description
It is a job step that activates the replication Merge Agent. The Replication Merge Agent is a utility executable that applies the initial snapshot held in the database tables to the Subscribers. It also merges incremental data changes that occurred at the Publisher after the initial snapshot was created, and reconciles conflicts either according to the rules you configure, or using a custom resolver you create. Merge job step isn't supported in Azure SQL Managed Instance.
Recommendation
Review affected objects section in Azure Migrate to see all jobs using Merge job step and evaluate if the job step or the affected object can be removed. Alternatively, migrate to SQL Server on Azure VMs.
More information: SQL Server Agent differences in Azure SQL Managed Instance
SQL Managed Instance database size
Title: Azure SQL Managed Instance does not support database size greater than 16 TB.
Category: Issue
Description
The size of the database is greater than maximum instance reserved storage. This database can't be selected for migration as the size exceeded the allowed limit.
Recommendation
Evaluate if the data can be archived compressed or sharded into multiple databases. Alternatively, migrate to SQL Server on Azure VMs.
More information: Hardware characteristics of Azure SQL Managed Instance
SQL Managed Instance instance size
Title: Maximum instance storage size in Azure SQL Managed Instance cannot be greater than 8 TB.
Category: Warning
Description
The size of all databases is greater than maximum instance reserved storage.
Recommendation
Consider migrating the databases to different Azure SQL Managed Instances or to SQL Server on Azure Virtual Machines if all the databases must exist on the same instance.
More information: Hardware characteristics of Azure SQL Managed Instance
Multiple log files
Title: Azure SQL Managed Instance does not support multiple log files.
Category: Issue
Description
SQL Server allows a database to log to multiple files. This database has multiple log files, which isn't supported in Azure SQL Managed Instance. This database can't be migrated as the backup can't be restored on Azure SQL Managed Instance.
Recommendation
Azure SQL Managed Instance supports only a single log per database. You need to delete all but one of the log files before migrating this database to Azure:
ALTER DATABASE [database_name] REMOVE FILE [log_file_name]
More information: Unsupported database options in Azure SQL Managed Instance
Next column
Title: Tables and Columns named NEXT will lead to an error In Azure SQL Managed Instance.
Category: Issue
Description
Tables or columns named NEXT were detected. Sequences, introduced in Microsoft SQL Server, use the ANSI standard NEXT VALUE FOR function. Tables or columns named NEXT and column aliased as VALUE with the ANSI standard AS omitted can cause an error.
Recommendation
Rewrite statements to include the ANSI standard AS keyword when aliasing a table or column. For example, when a column is named NEXT and that column is aliased as VALUE, the query SELECT NEXT VALUE FROM TABLE causes an error, and should be rewritten as SELECT NEXT AS VALUE FROM TABLE. Similarly, for a table named NEXT and aliased as VALUE, the query SELECT Col1 FROM NEXT VALUE causes an error, and should be rewritten as SELECT Col1 FROM NEXT AS VALUE.
Non-ANSI style left outer join
Title: Non-ANSI style left outer join is no longer supported and has been removed.
Category: Warning
Description
Non-ANSI style left outer join is no longer supported and has been removed in Azure SQL Managed Instance.
Recommendation
Use ANSI join syntax.
More information: Discontinued Database Engine Functionality in SQL Server
Non-ANSI style right outer join
Title: Non-ANSI style right outer join is no longer supported and has been removed.
Category: Warning
Description
Non-ANSI style right outer join is no longer supported and has been removed in Azure SQL Managed Instance.
More information: Discontinued Database Engine Functionality in SQL Server
Recommendation
Use ANSI join syntax.
Databases exceed 100
Title: Azure SQL Managed Instance supports a maximum of 100 databases per instance.
Category: Warning
Description
Maximum number of databases supported in Azure SQL Managed Instance is 100, unless the instance storage size limit has been reached.
Recommendation
Consider migrating the databases to different Azure SQL Managed Instances or to SQL Server on Azure Virtual Machines if all the databases must exist on the same instance.
More information: Azure SQL Managed Instance Resource Limits
OPENROWSET (non-BLOB data source)
Title: OpenRowSet used in bulk operation with non-Azure blob storage data source is not supported in Azure SQL Managed Instance.
Category: Issue
Description
OPENROWSET supports bulk operations through a built-in BULK provider that enables data from a file to be read and returned as a rowset. OPENROWSET with non-Azure blob storage data source isn't supported in Azure SQL Managed Instance.
Recommendation
Azure SQL Managed Instance can't access file shares and Windows folders, so the files must be imported from Azure Blob Storage. Therefore, only blob type DATASOURCE is supported in OPENROWSET function. Alternatively, migrate to SQL Server on Azure VMs.
More information: Bulk Insert and OPENROWSET differences in Azure SQL Managed Instance
OPENROWSET (non-SQL provider)
Title: OpenRowSet with non-SQL provider is not supported in Azure SQL Managed Instance.
Category: Issue
Description
This method is an alternative to accessing tables in a linked server and is a one-time, ad hoc method of connecting and accessing remote data by using OLE DB. OpenRowSet with non-SQL provider isn't supported in Azure SQL Managed Instance.
Recommendation
OPENROWSET function can be used to execute queries only on SQL Server instances (either managed, on-premises, or in Virtual Machines). The providers SQLNCLI, SQLNCLI11, SQLOLEDB, and MSOLEDBSQL (recommended) are supported. The Microsoft OLE DB Driver for SQL Server is recommended for new development.
The recommendation action is to identify the dependent databases from remote non-SQL Servers, and consider moving these into the instance being migrated.
More information: Bulk Insert and OPENROWSET differences in Azure SQL Managed Instance
PowerShell job
Title: PowerShell job step is not supported in Azure SQL Managed Instance.
Category: Warning
Description
It is a job step that runs a PowerShell script. PowerShell job step isn't supported in Azure SQL Managed Instance.
Recommendation
Review affected objects section in Azure Migrate to see all jobs using PowerShell job step and evaluate if the job step or the affected object can be removed. Evaluate if Azure Automation can be used. Alternatively, migrate to SQL Server on Azure VMs.
More information: SQL Server Agent differences in Azure SQL Managed Instance
Queue Reader job
Title: Queue Reader job step is not supported in Azure SQL Managed Instance.
Category: Warning
Description
It is a job step that activates the replication Queue Reader Agent. The Replication Queue Reader Agent is an executable that reads messages stored in a Microsoft SQL Server queue or a Microsoft Message Queue and then applies those messages to the Publisher. Queue Reader Agent is used with snapshot and transactional publications that allow queued updating. Queue Reader job step isn't supported in Azure SQL Managed Instance.
Recommendation
Review affected objects section in Azure Migrate to see all jobs using Queue Reader job step and evaluate if the job step or the affected object can be removed. Alternatively, migrate to SQL Server on Azure VMs.
More information: SQL Server Agent differences in Azure SQL Managed Instance
RAISERROR
Title: Legacy style RAISERROR calls should be replaced with modern equivalents.
Category: Warning
Description
RAISERROR calls like the below example are termed as legacy-style because they don't include the commas and the parenthesis. RAISERROR 50001 'this is a test'. This method of calling RAISERROR is no longer supported and removed in Azure SQL Managed Instance.
Recommendation
Rewrite the statement using the current RAISERROR syntax, or evaluate if the modern approach of BEGIN TRY { } END TRY BEGIN CATCH { THROW; } END CATCH is feasible.
More information: Discontinued Database Engine Functionality in SQL Server
SQL Mail
Title: SQL Mail has been no longer supported.
Category: Warning
Description
SQL Mail has been no longer supported and removed in Azure SQL Managed Instance.
Recommendation
Use Database Mail.
More information: Discontinued Database Engine Functionality in SQL Server
SystemProcedures110
Title: Detected statements that reference removed system stored procedures that are not available in Azure SQL Managed Instance.
Category: Warning
Description
Following unsupported system and extended stored procedures can't be used in Azure SQL Managed Instance - sp_dboption, sp_addserver, sp_dropalias,sp_activedirectory_obj, sp_activedirectory_scp, and sp_activedirectory_start.
Recommendation
Remove references to unsupported system procedures that have been removed in Azure SQL Managed Instance.
More information: Discontinued Database Engine Functionality in SQL Server
Transact-SQL job
Title: TSQL job step includes unsupported commands in Azure SQL Managed Instance
Category: Warning
Description
It is a job step that runs Transact-SQL scripts at scheduled time. TSQL job step includes unsupported commands, which aren't supported in Azure SQL Managed Instance.
Recommendation
Review affected objects section in Azure Migrate to see all jobs that include unsupported commands in Azure SQL Managed Instance and evaluate if the job step or the affected object can be removed. Alternatively, migrate to SQL Server on Azure VMs.
More information: SQL Server Agent differences in Azure SQL Managed Instance
Trace flags
Title: Trace flags not supported in Azure SQL Managed Instance were found
Category: Warning
Description
Azure SQL Managed Instance supports only limited number of global trace flags. Session trace flags aren't supported.
Recommendation
Review affected objects section in Azure Migrate to see all trace flags that aren't supported in Azure SQL Managed Instance and evaluate if they can be removed. Alternatively, migrate to SQL Server on Azure VMs.
More information: Trace flags
Windows authentication
Title: Database users mapped with Windows authentication (integrated security) are not supported in Azure SQL Managed Instance
Category: Warning
Description
Azure SQL Managed Instance supports two types of authentication:
- SQL Authentication, which uses a username and password
- Microsoft Entra authentication, which uses identities managed by Microsoft Entra ID and is supported for managed and integrated domains.
Database users mapped with Windows authentication (integrated security) aren't supported in Azure SQL Managed Instance.
Recommendation
Federate the local Active Directory with Microsoft Entra ID. The Windows identity can then be replaced with the equivalent Microsoft Entra identities. Alternatively, migrate to SQL Server on Azure VMs.
More information: SQL Managed Instance security capabilities
xp_cmdshell
Title: xp_cmdshell is not supported in Azure SQL Managed Instance.
Category: Issue
Description
xp_cmdshell, which spawns a Windows command shell and passes in a string for execution isn't supported in Azure SQL Managed Instance.
Recommendation
Review affected objects section in Azure Migrate to see all objects using xp_cmdshell and evaluate if the reference to xp_cmdshell or the affected object can be removed. Consider exploring Azure Automation that delivers cloud-based automation and configuration service. Alternatively, migrate to SQL Server on Azure VMs.
More information: Stored Procedure differences in Azure SQL Managed Instance
Related content
- Migration guide: SQL Server to Azure SQL Managed Instance
- Services and tools available for data migration scenarios
- Service Tiers in Azure SQL Managed Instance
- T-SQL differences between SQL Server & Azure SQL Managed Instance
- Azure total Cost of Ownership Calculator
- Cloud Adoption Framework for Azure
- Best practices for costing and sizing workloads migrate to Azure
- Data Access Migration Toolkit (Preview)
- Overview of Database Experimentation Assistant