Cannot connect to Azure Database for MySQL Flexible Server from Cloud Shell.

Hi abdul shakoor,

I hope you had a chance to review the information shared earlier, and I hope this information has been helpful! If you still have questions, please let us know what is needed in the comments so the question can be answered.

Thanks,
Manoj

Hi abdul shakoor,

Thanks for sharing all the details — that really helps understand what’s going on.

From what you have described, there are actually two separate problems here: one with the Cloud Shell connection and another with the database login from your PHP app.

1. Cloud Shell connection issue

The error “Name or service not known” usually means Cloud Shell can’t resolve the server name.
This happens when your MySQL Flexible Server is using Private access (VNet Integration).

Since Cloud Shell runs in Microsoft’s managed network, it doesn’t have access to private endpoints inside your VNet.

You can check this in the Azure portal under:
Azure Database for MySQL → Networking → Connectivity method

If it’s set to Private access, Cloud Shell won’t be able to connect.
You can either:

Switch the server to Public access (allowed), or

Connect from a VM or Bastion host inside the same VNet.

2. Azure CLI command syntax

In your command, you used the full hostname (sumradb.mysql.database.azure.com) in the --name field.
That’s what’s causing the DNS issue.

The CLI automatically adds .mysql.database.azure.com, so when you type the full FQDN, it duplicates it and becomes invalid.

Try this instead:

az mysql flexible-server connect --admin-user sumradb --name sumradb

3. Access denied from PHP

This error means the server is reachable, but the authentication is failing.
It’s separate from the Cloud Shell issue.

Please check:

• You’re using the right username format: sumradb@sumradb

The password is correct and matches what’s set in the portal

If you want to create another user for your app:

CREATE USER 'appuser'@'%' IDENTIFIED BY 'StrongPassword!';
GRANT ALL PRIVILEGES ON your_database.* TO 'appuser'@'%';
FLUSH PRIVILEGES;

The admin account in Flexible Server doesn’t have full SUPER privileges, so you’ll get an error if you try to use WITH GRANT OPTION.

Cloud Shell connection issue is likely happening because the MySQL Flexible Server is set to private access or because the full server name (FQDN) was used in the command. Cloud Shell can’t reach servers on private networks, and using the full hostname causes a DNS error since the CLI automatically appends “.mysql.database.azure.com.” To fix this, try connecting with --name sumradb or connect from a virtual machine within the same VNet.

The “Access denied” error from your PHP application is a separate issue related to authentication. It usually means the username or password is incorrect, or the user mapping isn’t properly set up. Make sure you’re using the correct credentials (sumradb@sumradb) and, if needed, create a new user with proper privileges to allow the application to connect successfully.

Do let us know if you have questions and queries.

Thanks,
Manoj