Implement AI capabilities in database solutions1 / 5
A data platform team on SQL Server 2025 grants a developer the CREATE EXTERNAL MODEL database permission so that the developer can register an embedding endpoint. The team states that this grant is by itself enough for the same developer to call AI_GENERATE_EMBEDDINGS with the registered model. Is that statement supported by the CREATE EXTERNAL MODEL reference?
CorrectIncorrect
Alex
The external model is a database object, and the reference gives it the same two-level permission story as other executable objects. Creating one, or altering an existing one, requires either the CREATE EXTERNAL MODEL or the ALTER ANY EXTERNAL MODEL database permission, which is the administrative side. Using it from a function such as AI_GENERATE_EMBEDDINGS requires an EXECUTE grant on that specific model, which is the consumption side and can be given to principals who do not create database objects themselves. The separation is useful in practice: a platform team registers and owns the endpoint definition, and application principals receive execute rights on exactly the models they need. The statement also has an owner, set by the AUTHORIZATION clause, and the current user becomes the owner when that clause is omitted. Read the stem for which of the two actions is being attempted.
Sourcelearn.microsoft.com
Follow-up answers are available in the app. Create a free account — no credit card required.
Question 1 of 5
Create a free account