Azure SQL Connection Error Code: 18456 Error State: 15

Question

Hi, we have a strange issue with Azure Sql. When ever a User run lot of queries with aginst Azure Sql. His/Her account getting blocked on the database . Log shows following error.

• <login_information><error_code>18456</error_code><error_state>15</error_state></login_information>

There is no documentation for ErrorState:15 for ErrorCode : 18456

User is trying to log in with Azure Active Directory - Universal with MFA

Following steps are taken to troubleshoot:

Does user get Access Token successfully ?

• Yes. User is able to get Access Token. Get-AzAccessToken -ResourceUrl https://database.windows.net

Using the token can User able to connect to master database of Azure Sql?

• Yes.
• Issue is only happening on the Database level.

User is part of AAD groups where other members are able to connect successfully using the same method.

Logid SID, User SID , AAD ID everything match.

Hope anyone can able to get more information about the following :

ErrorState:15 for ErrorCode : 18456

Answer 1

Hi ,

Thanks for reaching out to Microsoft Q&A.

Hope you have run a check on these already? if not pls go ahead.

1. Account Lockout or Disablement: Frequent query executions might trigger security mechanisms that temporarily lock or disable the user's account.
2. Permission Issues: The user may lack necessary permissions on the specific database, even if they can access the master database.
3. Group Membership Propagation Delays: Changes in AAD group memberships might not immediately reflect in Azure SQL Database permissions.

Recommended Troubleshooting Steps:

Verify Account Status: Ensure the user's account is active and not locked or disabled.

Check Database-Specific Permissions: Confirm that the user has appropriate permissions on the target database. Even if the user is part of an AAD group with access, individual permissions might need verification.

Review AAD Group Memberships: Ensure that group membership changes have propagated correctly. This can sometimes take time, and delays might cause intermittent access issues.

Monitor for Security Policies: Check if there are any security policies or triggers that might block users after a certain threshold of queries or activities.

Consult SQL Server Error Logs: Detailed error logs can provide more context about the failure. Access these logs to identify patterns or specific triggers for the error.

Please feel free to click the 'Upvote' (Thumbs-up) button and 'Accept as Answer'. This helps the community by allowing others with similar queries to easily find the solution.

Answer 2

There is no documentation for ErrorState:15 for ErrorCode : 18456

Lookup SQL Server ErrorLog for details, you will find the reason in clear text, not only the code.