SQL Server 2025: Cloud and Hybrid Integration with Azure Arc and Microsoft Fabric
- The Ground-to-Cloud-to-Fabric Model
- Azure Arc: A Control Plane for SQL Server Anywhere
- What’s New in Arc for SQL Server 2025
- Microsoft Fabric: Analytics Without Heavy ETL
- Fabric Mirroring: The SQL Server 2025 Difference
- Fabric Mirroring Prerequisites and Constraints
- Workshop Part 1 — Connect SQL Server to Azure Arc
- Workshop Part 2 — Enable Fabric Mirroring
- Workshop Part 3 — Governance and Monitoring
- Validating Workload Isolation
- Final Thoughts
- References
The Ground-to-Cloud-to-Fabric Model
SQL Server 2025 continues Microsoft’s push toward a unified data platform by strengthening cloud and hybrid integration. Rather than forcing migrations, the focus is on managing SQL Server consistently across environments and making operational data available for analytics without heavy ETL pipelines.
Two technologies drive this shift: Azure Arc and Microsoft Fabric. Together they implement what Microsoft calls the Ground-to-Cloud-to-Fabric model — SQL Server runs wherever you need it, Arc provides centralized management and governance, and Fabric receives near-real-time analytics data through mirroring.
SQL Server 2025
- System of record
- OLTP and transactional workloads
- Strong transactional guarantees
- Runs on-premises, VMs, or containers
- Stays optimized for writes
Azure Arc
- Centralized inventory and governance
- Microsoft Entra ID authentication
- Managed identity for outbound connections
- Azure Monitor and Policy integration
- Required for Fabric Mirroring
Microsoft Fabric
- Analytics, reporting, and AI
- Scalable read-heavy workloads
- Power BI and Data Warehouse
- Data stored in OneLake as Delta Parquet
- Near-real-time via Fabric Mirroring
The Result
- SQL Server performance preserved for OLTP
- Analytics workloads fully separated
- No complex ETL pipelines to maintain
- Centralized identity and governance
- Near-real-time data in the analytics layer
Azure Arc: A Control Plane for SQL Server Anywhere
Azure Arc extends Azure management and governance to SQL Server instances running outside Azure — including on-premises servers, edge locations, and other clouds. Once connected through Azure Arc, SQL Server instances can be inventoried, governed, monitored, and secured centrally without moving data.
Key principle: Data stays local. Management, governance, identity, and visibility move to Azure. Azure Arc does not replicate or expose your data — it gives Azure a management channel to the instance.
Arc-enabled SQL Server provides the following capabilities regardless of where the instance runs:
- Inventory — see all SQL Server instances, versions, editions, and OS in one place
- Licensing management — pay-as-you-go billing, Extended Security Updates (ESU) for older versions
- Best Practices Assessment — automated review of configuration and security posture
- Azure Policy integration — apply and audit governance rules consistently
- Azure Monitor integration — centralized health and telemetry
- Microsoft Defender for SQL — threat detection and vulnerability assessment
- Automated local backups — managed backup scheduling
- Always On management — monitor and manage AG health from Azure portal
What’s New in Arc for SQL Server 2025
| Feature | SQL Server 2022 and Earlier | SQL Server 2025 |
|---|---|---|
| Microsoft Entra ID authentication | Available (SQL Server 2022+) | Full support — enhanced MFA, SSO, managed identity |
| Managed identity for outbound connections | Limited | Full support — BACKUP to URL, Key Vault, Fabric Mirroring |
| Fabric Mirroring via Change Feed | CDC-based (2016–2022) | Change Feed — lower overhead, no sysadmin required |
| Password-less Azure connections | Credential-based | System-assigned managed identity — no secrets to manage |
| TLS/TDS encryption | TLS 1.2 | TDS 8.0 with TLS 1.3 by default |
The most significant Arc improvement in SQL Server 2025 is full Microsoft Entra managed identity support. SQL Server instances can now authenticate to Azure services — including Azure Storage for backups, Azure Key Vault for encryption keys, and Fabric for mirroring — without storing or managing any credentials. The system-assigned managed identity is provisioned through the Azure Arc agent and used automatically.
Microsoft Fabric: Analytics Without Heavy ETL
Microsoft Fabric is Microsoft’s unified analytics platform that combines data engineering, data warehousing, real-time analytics, and Power BI under a single SaaS experience. SQL Server 2025 builds a direct integration path to Fabric through mirroring — making operational data available for analytics with minimal infrastructure and no custom pipeline code.
Data mirrored from SQL Server lands in OneLake, Fabric’s unified storage layer, as Delta Parquet files. From there it is immediately accessible to Fabric Data Warehouse, Power BI, notebooks, and AI workloads — all without the operational overhead of maintaining ETL pipelines.
Fabric Mirroring: The SQL Server 2025 Difference
Fabric Mirroring was first released in preview in March 2024 using Change Data Capture (CDC). SQL Server 2025 introduces a fundamentally better mechanism: the Change Feed. Understanding the difference matters when planning your mirroring architecture.
CDC-Based Mirroring (SQL Server 2016–2022)
- Scans transaction log asynchronously
- Writes changes to dedicated change tables (one per tracked table)
- SQL Agent job (sys.sp_cdc_scan) handles the log scan
- Fabric polls the change tables and pulls to OneLake
- Requires sysadmin to configure CDC
- Performance overhead from change table writes
- DDL limitations on tracked tables
Change Feed (SQL Server 2025)
- Purpose-built feed for Fabric integration
- No change tables — lower overhead on busy OLTP systems
- Uses system-assigned managed identity for auth
- No sysadmin elevation required to configure
- Dedicated login with minimal permissions only
- Initial snapshot, then continuous change stream
- Resilient — resumes from exact point after outage
If you are on SQL Server 2025, use the Change Feed for Fabric Mirroring. If you are on SQL Server 2016–2022, CDC-based mirroring still works — go in with eyes open about the sysadmin requirement and performance overhead on high-write tables.
Fabric Mirroring Prerequisites and Constraints
As of March 2026: SQL Server 2025 Fabric Mirroring is supported for on-premises instances only. It is not supported for SQL Server 2025 running on an Azure Virtual Machine or on Linux. Azure Arc with the Azure Extension for SQL Server must be installed — this is a hard requirement, not optional.
- SQL Server must be Arc-enabled with the Azure Extension for SQL Server installed
- On-premises Windows only — not Azure VMs, not Linux (as of April 2026)
- Source database must use the Full Recovery Model — Simple recovery is not supported
- Tables must have a Primary Key to be eligible for mirroring — tables without a PK are excluded
- Required ports for Azure Arc must be open for outbound data movement to OneLake
- Microsoft Fabric capacity must be available in your Azure subscription
- If network connectivity is interrupted, SQL Server holds transaction log records until connectivity restores — monitor log growth during extended outages
-- Verify recovery model before enabling mirroring
SELECT name, recovery_model_desc
FROM sys.databases
WHERE name = 'YourDatabase';
-- Must show FULL — change if needed:
-- ALTER DATABASE YourDatabase SET RECOVERY FULL;
-- Find tables without a Primary Key (excluded from mirroring)
SELECT t.name AS table_name
FROM sys.tables t
WHERE NOT EXISTS
(
SELECT 1 FROM sys.key_constraints kc
WHERE kc.parent_object_id = t.object_id
AND kc.type = 'PK'
)
ORDER BY t.name;
Workshop
Goal: Register a SQL Server instance with Azure so it can be centrally managed and prepared for Fabric Mirroring.
Prerequisites:
- A running SQL Server 2025 instance (on-premises Windows)
- An Azure subscription with Arc permissions
- Local admin rights on the SQL Server host
- Outbound HTTPS access from the SQL Server host to Azure endpoints
- .NET Framework 4.7.2 or later on the host
Verify SQL Server Eligibility
-- Confirm version and edition on the SQL Server machine
SELECT @@VERSION;
-- Confirm the instance is not in a container
-- Containers are not supported for Arc-enabled SQL Server
SQL Server 2025 on Windows is fully supported. Verify .NET Framework 4.7.2 or later is installed on the host before proceeding.
Open Azure Arc in the Azure Portal
Navigate to portal.azure.com, search for Azure Arc, and select it. You should see the Azure Arc overview page with options for Machines, SQL Servers, and Kubernetes Clusters.
Generate and Run the Onboarding Script
In Azure Arc, click SQL Servers → Add → Connect SQL Server → Connect using Azure Arc. Azure generates an onboarding script. Copy it to the SQL Server host, then run it as Administrator in PowerShell:
# Run as Administrator on the SQL Server host
# The generated script installs the Arc agent and registers with Azure
# Script is unique to your subscription and instance — do not share it
.\ArcOnboardingScript.ps1
Wait for a successful completion message before proceeding.
Verify Registration
Return to Azure Portal → Azure Arc → SQL Servers. Refresh the page. You should see your server with:
- Server name and SQL Server version/edition
- Host operating system
- Connection status: Connected
Enable System-Assigned Managed Identity
Navigate to your Arc-enabled SQL Server resource in Azure → Microsoft Entra ID. Verify the system-assigned managed identity is enabled. This identity is used by Fabric Mirroring for secure outbound authentication — it must be active before mirroring can be configured.
-- Verify managed identity is configured from SQL Server side
-- Run after Arc agent is installed
SELECT name, type_desc
FROM sys.server_principals
WHERE type_desc = 'EXTERNAL_LOGIN'
AND name LIKE '%managed%';
Goal: Mirror SQL Server 2025 data to Microsoft Fabric OneLake for near-real-time analytics without impacting OLTP workloads.
Prerequisites:
- Arc-enabled SQL Server 2025 (on-premises Windows) — completed in Part 1
- System-assigned managed identity enabled
- Source database on Full Recovery Model
- All tables to be mirrored have Primary Keys
- Microsoft Fabric workspace with available capacity
Prepare the Source Database
-- Confirm Full Recovery Model
ALTER DATABASE YourDatabase SET RECOVERY FULL;
-- Create a dedicated mirroring login with minimal permissions
-- sysadmin is NOT required for SQL Server 2025 Change Feed mirroring
CREATE LOGIN fabric_mirror_login WITH PASSWORD = 'StrongPasswordHere!',
CHECK_POLICY = ON, CHECK_EXPIRATION = ON;
USE YourDatabase;
CREATE USER fabric_mirror_user FOR LOGIN fabric_mirror_login;
-- Grant only the minimum permissions needed
GRANT SELECT ON SCHEMA::dbo TO fabric_mirror_user;
GRANT VIEW DATABASE STATE TO fabric_mirror_user;
GRANT VIEW SERVER STATE TO fabric_mirror_login;
Create a Mirrored Database in Fabric
In the Fabric portal (app.fabric.microsoft.com), navigate to your workspace, click New → Mirrored Database, and select SQL Server as the source. Provide:
- The Arc-enabled SQL Server instance name
- The source database name
- The mirroring login credentials
Fabric will initiate an initial snapshot — all eligible tables are snapshotted to OneLake, then the Change Feed takes over for ongoing changes.
Monitor Mirroring Status
-- Monitor mirroring activity from SQL Server side (DMVs)
-- Check for active replication processes
SELECT
session_id,
status,
command,
wait_type,
wait_time,
LEFT(text, 200) AS query_text
FROM sys.dm_exec_requests r
OUTER APPLY sys.dm_exec_sql_text(r.sql_handle) t
WHERE command LIKE '%MIRROR%'
OR command LIKE '%FABRIC%';
-- Monitor transaction log usage during mirroring
SELECT
name,
log_size_mb = size * 8.0 / 1024,
log_used_pct = FILEPROPERTY(name, 'SpaceUsed') * 100.0 / size
FROM sys.databases
WHERE name = 'YourDatabase';
In the Fabric portal, the Mirrored Database item shows replication status, last sync time, and any errors for each table.
Assign Azure Policies
In the Azure portal, open Azure Policy → Definitions, search for SQL Server, and assign relevant built-in policies to your Arc-enabled SQL Server scope. Common policies include encryption requirements, authentication mode checks, and audit logging requirements.
Review Compliance Results
Open Azure Policy → Compliance and filter by your SQL Server resource. Review compliant and non-compliant settings. Policies are assessment-only unless you configure remediation tasks — no changes are enforced automatically without explicit configuration.
Enable Azure Monitor
Open your Arc-enabled SQL Server in Azure → Monitoring → enable Azure Monitor integration. This centralizes health metrics, error log forwarding, and performance counters alongside your other Azure resources.
Validating Workload Isolation
One of the key benefits of this architecture is that analytics workloads run entirely in Fabric — they never query SQL Server directly. Validate this by confirming SQL Server is not serving heavy read queries while mirroring is active:
-- While analytics are running in Fabric, confirm no heavy read queries on SQL Server
SELECT
session_id,
status,
command,
wait_type,
cpu_time,
logical_reads,
LEFT(t.text, 200) AS query_text
FROM sys.dm_exec_requests r
OUTER APPLY sys.dm_exec_sql_text(r.sql_handle) t
WHERE r.logical_reads > 100000 -- Flag high-read queries
ORDER BY r.logical_reads DESC;
-- If this returns no rows while Fabric reports are running,
-- your workload isolation is working correctly.
Final Thoughts
SQL Server 2025 does not force a cloud migration. It provides a realistic hybrid path that meets most organizations where they are. Azure Arc delivers centralized control and modern identity across on-premises instances. Fabric Mirroring using the new Change Feed delivers near-real-time analytics data to OneLake without the overhead of CDC change tables, without sysadmin access, and without custom ETL pipelines.
This architecture lets SQL Server remain the core transactional platform — optimized for writes, protected by familiar HA and security patterns — while fully participating in a modern, AI-ready analytics ecosystem. The separation of responsibilities is clean, the overhead is minimal, and the management is centralized.
Check evolving constraints: Fabric Mirroring for SQL Server 2025 is actively evolving. As of April 2026, on-premises Windows only — no Azure VMs, no Linux. Review the Fabric Mirroring roadmap before planning production deployments.
References
- Microsoft Learn – SQL Server Enabled by Azure Arc
- Microsoft Learn – Azure Arc for SQL Server Prerequisites
- Microsoft Learn – Mirroring SQL Server in Microsoft Fabric
- Microsoft Learn – Microsoft Fabric Overview
- Microsoft Learn – Azure Policy Overview
- Data Savvy – How Fabric Mirroring Transformed with SQL Server 2025
- Reitse’s Blog – Mirroring SQL Server 2025 to Microsoft Fabric: A Level Deeper
Discover more from SQLYARD
Subscribe to get the latest posts sent to your email.


