sql server how do you control access to database for AD user?

 To grant access to a database for a Active Directory user, you can use the following command

 

CREATE USER 'bob@microsoft.com' FROM EXTERNAL PROVIDER;

ALTER ROLE db_datareader ADD MEMBER 'bob@microsoft.com'