Skip to main content
Allow inbound access from Less IP addresses to your SQL Server instance (firewall, Azure SQL networking rules, security groups, and so on).The login you use must have permission to create and write in the target database so Less can load data from models.
The Microsoft SQL Server destination writes data from Less into SQL Server, Azure SQL (including Azure SQL Database), or Microsoft Fabric SQL Database. The wizard asks for a TCP connection: host, port, database, and credentials. The default port is 1433 unless your administrator assigns a different one.
1

Account

Enter the host (hostname or IP, for example db-test.mssql.database.azure.com for Azure SQL or *.database.fabric.microsoft.com for Fabric SQL Database), port (typically 1433), and the database name.
2

Credentials

Select your authentication type:
  • SQL username and password (default) — enter the username and password for SQL authentication (for example a contained database user on Azure SQL or a SQL login on your instance).
  • Microsoft Entra Service Principal — enter the client ID and client secret from a Microsoft Entra app registration. Required for Fabric SQL Database and other Entra-only endpoints. See How to create Entra Service Principal.
3

SSH

If the database is only reachable through a jump host, enable the SSH tunnel and provide SSH host, port, username, and password, or use an SSH key instead of a password.If your server is directly reachable from the internet or a private link Less can use, you can leave the tunnel disabled.
4

Test Connection

Use Test Connection to verify host, port, database, and credentials before saving. Error messages are returned as received from SQL Server.