New LoginManager cannot see all users

Question

Hi all,
Just trying to get to grips with users and roles in Azure, and I've hit a couple of questions.
Here's the process I've been through.
I created a new server
I exported a database from an existing SQL Server as a bacpac file, and successfully imported it into Azure (this step I'm hazy on the details, because I only did it the once, and it was a while back now!)
I connected an existing MS Access front end to the Azure SQL Database successfully.
This database is for a client with half a dozen staff. All works well.
Going through the database in more detail today, I noticed that the database in question has users for the staff at my client, but not a user called Andrew - which I've always logged in as. Looking more closely, I see that the Login of Andrew, which I understand
was created as part of the provisioning process when I set up Azure SQL Database, is mapped to dbo within the database.
In order to keep things simple, I decided today to create a new user "Andrew" on the database, which would map to the Server login of Andrew. To do so, I used this statement:
CREATE USER andrew
FOR LOGIN Andrew
However, the following message was returned:
'Andrew' is not a valid login or you do not have permission.
This confuses me, as I can see that the login Andrew does exist, both when I look at the Security > Logins object within SSMS, and if I issue the statement
SELECT * FROM sys.sql_logins
So, I thought that maybe the solution would be to create a new Login, called AndrewR, and then create a new User on the database (and on the master database), also called AndrewR. This I did, and then I used the following two statements (while logged in
to the Master database as the original Andrew account):
exec sp_addrolemember 'loginmanager' , 'AndrewR'
exec sp_addrolemember 'dbmanager' , 'AndrewR'
Now, all seems good, in that the login is created successfully, as is the user. However, I now have the following problems:
When I log in to master as AndrewR (the new user) I can see all the databases. But I can't see any user except AndrewR, dbo, guest, sys and INFORMATION_SCHEMA. When I log in as the original login (Andrew) I can see all the users on all the databases.
Despite having granted loginmanager role to AndrewR, when logged in as AndrewR if I try to create a new user, I get a strange error:
Password validation failed. The password does not meet policy requirements because it is not complex enough.
This would make sense except that the password I've tried to assign is 'drtrtDSP()*)_IPOJTh1s_FREDpw1!' which is about as complex as I can come up with!
None of this solves my original issue of trying to create a user called Andrew to match the original Login of Andrew.
I'm sorry to post several questions in one post, but they seem to me to be all part of this same issue.
Can anyone help or provide guidance?
Incidentally, I've read (several times!) the information at http://msdn.microsoft.com/en-us/library/ee336235.aspx - this is where I've gained what little knowledge I have!
Many thanks
Andrew

Answer 1

Hello
Andrew,<o:p></o:p>
Thank you
for the explanation. Is there is a specific reason why you want to create a
user 'Andrew' for the Server-level principal login 'Andrew'. Cause - <o:p></o:p>
1. The
database user in the master database corresponding to the server-level
principal login cannot be altered or dropped.
2. Although the server-level principal login is not a member of the two
database roles dbmanager and loginmanager in the master database, it has all
permissions granted to these two roles.<o:p></o:p>
Please refer msdn.microsoft.com/en-us/library/azure/ff394108.aspx#logins and msdn.microsoft.com/en-us/library/ee336235.aspx#DatabasePerms for details.
Also, I
believe only the creator of the database(and the server-level principal login)
can create users in that database. For ex - <o:p></o:p>
After you
created user AndrewR and granted it the dbmanager and loginmanager roles.<o:p></o:p>
1. Connect to the database server(master database) as AndrewR.<o:p></o:p>
2. Create a new database AndrewDB and a new login AndrewR1, like below - <o:p></o:p>
create database AndrewDB<o:p></o:p>
create login AndrewR1<o:p></o:p>
exec sp_addrolemember 'loginmanager' , 'AndrewR1'<o:p></o:p>
exec sp_addrolemember 'dbmanager' , 'AndrewR1'<o:p></o:p>
3. Connect to the database AndrewDB as AndrewR<o:p></o:p>
Create user AndrewR1 for login
AndrewR1                       
-------à this works.<o:p></o:p>
I hope this
helps. <o:p></o:p>