Merge branch 'live' into patch-2

Author: KumarVivek

powerapps-docs/developer/common-data-service/TOC.yml

@@ -7,6 +7,17 @@
   items:
   - name: Supported customizations
     href: supported-customizations.md
+- name: Security and data access
+  href: security-model.md
+  items:
+  - name: Security concepts
+    href: security-concepts.md
+  - name: Data operations and access rights
+    href: security-access-rights.md
+  - name: Sharing and assigning
+    href: security-sharing-assigning.md
+  - name: Verifying access in code
+    href: security-access-coding.md
 - name: Work with data using code
   href: work-with-data-cds.md
   items:
@@ -47,8 +58,10 @@
       href: quick-find-limit.md
     - name: Improve FetchXML request performance
       href: fetchxml-performance.md
-  - name: "Use SQL to query data (Preview)"
+  - name: "Use SQL to query data"
     href: cds-sql-query.md
+  - name: "Dataverse SQL"
+    href: how-cds-sql-differs-from-transact-sql.md
   - name: Saved Queries
     href: saved-queries.md
   - name: Query Hierarchical data
@@ -251,22 +264,19 @@
     href: use-category-entity.md
   - name: Feedback entity
     href: use-feedback-entity-manage-feedback-ratings-records.md
-  - name: Security entities
-    href: security-model.md 
+  - name: User and team entities
+    href: user-team-entities.md
     items:
-    - name: User and team entities
-      href: user-team-entities.md
-      items:
-      - name: Specify time zone settings for a user
-        href: specify-time-zone-settings-user.md
-      - name: Time zone entities
-        href: time-zone-entities.md
-      - name: BusinessUnit entity
-        href: businessunit-entity.md
-      - name: Field security entities
-        href: field-security-entities.md
-      - name: Use access teams and owner teams to collaborate and share information
-        href: use-access-teams-owner-teams-collaborate-share-information.md
+    - name: Specify time zone settings for a user
+      href: specify-time-zone-settings-user.md
+    - name: Time zone entities
+      href: time-zone-entities.md
+    - name: BusinessUnit entity
+      href: businessunit-entity.md
+    - name: Field security entities
+      href: field-security-entities.md
+    - name: Use access teams and owner teams to collaborate and share information
+      href: use-access-teams-owner-teams-collaborate-share-information.md
   - name: Template entities
     href: upload-manage-document-templates.md
 - name: Work with metadata using code

powerapps-docs/developer/common-data-service/cds-sql-query.md

@@ -2,7 +2,7 @@
 title: "Use SQL to query data (Microsoft Dataverse) | Microsoft Docs" # Intent and product brand in a unique string of 43-59 chars including spaces
 description: "Learn how to query Microsoft Dataverse entity data using SQL." # 115-145 characters including spaces. This abstract displays in the search result.
 ms.custom: ""
-ms.date: 11/09/2020
+ms.date: 12/16/2020
 ms.reviewer: "pehecke"
 ms.service: powerapps
 ms.topic: "article"
@@ -23,26 +23,23 @@ search.app:
 [!INCLUDE[cc-beta-prerelease-disclaimer](../../includes/cc-beta-prerelease-disclaimer.md)]
 
 > [!IMPORTANT]
-> This feature has been re-enabled in the majority of regions. Please resume testing, and provide feedback. We thank you for your patience and feedback.
-
-
-A SQL data connection is available on the Microsoft Dataverse endpoint. The SQL connection provides read-only access to the entity data of the target Dataverse environment. This allows you to write and execute SQL queries against the entity data table. Table columns provide the attribute data of the entity. No custom views of the data have been provided.
+> This feature has been re-enabled in the majority of regions. Please resume testing, and provide feedback. We thank you for your patience and feedback.<p/>
+> [!INCLUDE[cc_preview_features_definition](../../includes/cc-preview-features-definition.md)]
 
+A SQL data connection is available on the Microsoft Dataverse endpoint. The SQL connection provides read-only access to the entity data of the target Dataverse environment. This allows you to execute SQL queries against the entity data table. Table columns provide the attribute data of the entity. No custom views of the data have been provided.
 
+## Applications support
 
-> [!IMPORTANT]
-> - This is a preview feature, and isn't available in all regions.
-> - [!INCLUDE[cc_preview_features_definition](../../includes/cc-preview-features-definition.md)]
-> - Instructions to enable the feature can be found here: [View entity data in Power BI Desktop](/powerapps/maker/common-data-service/view-entity-data-power-bi), and [Manage feature settings](/power-platform/admin/settings-features) (see TDS endpoint setting).
+TDS (SQL) endpoint applications support for Power Apps and SQL Server Management Studio is described below.
 
-## Applications support
+### Power Apps
 
-You can use the **Analyze in Power BI** option (**Data** > **Entities** > **Analyze in Power BI**) in Power Apps (https://make.powerapps.com) to use the SQL connection feature to analyze data in Power BI Desktop. More information: [View entity data in Power BI Desktop](/powerapps/maker/common-data-service/view-entity-data-power-bi)
+You can use the **Analyze in Power BI** option (**Data** > **Entities** > **Analyze in Power BI**) in Power Apps (https://make.powerapps.com) to use the Dataverse connector to analyze data in Power BI Desktop. More information: [View entity data in Power BI Desktop](/powerapps/maker/common-data-service/view-entity-data-power-bi)
 
 > [!NOTE]
-> To verify if your target environment has the Dataverse SQL connection feature enabled, do the following:
-> 1. Sign into Power Apps, on the left navigation pane expand **Data**, and then select **Entities**.
-> 2. On the command bar, you should see a button **Analyze in Power BI**. If you do not see this button, your environment does not yet have the feature.
+> To enable this feature, see the TDS endpoint setting in [Manage feature settings](/power-platform/admin/settings-features). Once enabled you should see a button **Analyze in Power BI** in the command bar of Power Apps.
+
+### SQL Server Management Studio
 
 You can also use [SQL Server Management Studio](/sql/ssms/download-sql-server-management-studio-ssms) (SSMS) version 18.4 or later with the Dataverse endpoint SQL connection. Examples of using SSMS with the SQL data connection are provided below.
 
@@ -52,10 +49,13 @@ You can also use [SQL Server Management Studio](/sql/ssms/download-sql-server-ma
 
 The Dataverse endpoint SQL connection uses the Dataverse security model for data access. Data can be obtained for all entities to which a user has access to in Dataverse.
 
-Only Azure Active Directory authentication is supported. SQL authentication and Windows authentication are not supported. Below is an example of how to logon to the SQL connection in SSMS. Notice the server name is the organization address URL followed by a comma and the port value of 5558.
+Only Azure Active Directory authentication is supported. SQL authentication and Windows authentication are not supported. Below is an example of how to logon to the SQL connection in SSMS. Notice the server name is the organization address URL.
 
 ![Connec dialog](media/ssms-connect-dialog.PNG)
 
+> [!NOTE]
+> The requirement to specify a port number after the service URL has been removed.
+
 ## Example entity data queries
 
 Below are a couple of example queries composed in SSMS. The first image shows a simple query using aliases and result ordering.
@@ -76,13 +76,7 @@ select name, fullname from account a inner join contact c on a.primarycontactid
 
 ## Supported operations and data types
 
-The list of supported SQL operations includes:
-
-- Batch operations
-- SELECT
-- Aggregation functions (i.e., Count() and Max() functions)
-- UNIONs and JOINs
-- Filtering
+For a detailed list of supported SQL operations on the Dataverse endpoint see [How Dataverse SQL differs from Transact-SQL](how-cds-sql-differs-from-transact-sql.md).
 
 Any operation that attempts to modify data (i.e., INSERT, UPDATE) will not work as this is a read-only SQL data connection. Dataverse option sets are represented as \<OptionSet\>Name and \<OptionSet\>Label in a result set.
 
@@ -99,10 +93,42 @@ The following Dataverse datatypes are not supported with the SQL connection: `bi
 > group by act.activityid, act.subject
 > ```
 
-## Plug-ins
+## Limitations
+
+There is an 80MB maximum size limit for query results returned from the Dataverse endpoint. Consider using data integration tools such as [Data Export Service](https://docs.microsoft.com/powerapps/developer/common-data-service/data-export-service) and [dataflows](https://docs.microsoft.com/power-bi/transform-model/dataflows/dataflows-introduction-self-service) for large data queries that return over 80MB of data. More information: [Importing and exporting data](/powerapps/maker/common-data-service/why-cds-import-export)
+
+Dates returned in query results are formatted as Universal Time Coordinated (UTC). Previously, dates were returned in local time.
+
+> [!NOTE]
+> Until a service update planned for January 2021 has deployed, using date filters will be slow.
 
 Querying data using SQL does not trigger any plug-ins registered on the <xref:Microsoft.Xrm.Sdk.Messages.RetrieveMultipleRequest> or <xref:Microsoft.Xrm.Sdk.Messages.RetrieveRequest> messages. Any re-writing of the query or results that would normally be performed by such a plug-in will therefore not take effect for a SQL query.
 
+Queries using the TDS endpoint execute under the service protection API limits.
+
+## Troubleshooting authentication problems
+
+Only Azure Active Directory authentication is supported on the Dataverse endpoint SQL connection. The preferred authentication mechanism is "Azure Active Directory – Universal" with multi-factor authentication (MFA). However, "Azure Active Directory – Password" will work if MFA is not configured. If you try to use other forms of authentication, you will see errors like the following.
+
+- Error returned when using **Azure Active Directory – Integrated** authentication.
+
+“Login failed: The HTTP request was forbidden with client authentication scheme 'Anonymous'.
+RequestId: TDS;81d8a4f7-0d49-4d21-8f50-04364bddd370;2
+Time: 2020-12-17T01:10:59.8628578Z (.Net SqlClient Data Provider)”
+
+- Error returned when using **SQL Server** authentication.
+
+“Login failed: Request is not authenticated.
+RequestId: TDS;918aa372-ccc4-438a-813e-91b086355343;1
+Time: 2020-12-17T01:13:14.4986739Z (.Net SqlClient Data Provider)”
+
+- Error returned when using **Windows** authentication.
+
+“Login failed: Request is not authenticated.
+RequestId: TDS;fda17c60-93f7-4d5a-ad79-7ddfbb917979;1
+Time: 2020-12-17T01:15:01.0497703Z (.Net SqlClient Data Provider)”
+
 ### See also
 
-[Use FetchXML to construct a query](use-fetchxml-construct-query.md)
+[Use FetchXML to construct a query](cds-sql-query.md)  
+[Service Protection API Limits](api-limits.md)