If you look at the logins for a Managed Instance, you will notice two logins
that are created by default for any Managed Instance: WASDRGTenantMonitoringRO
and xtsuser (which is actually disabled). These logins are part of the internal role
Microsoft creates for DevOps purposes. These roles only have CONNECT and VIEW
SERVER STATE permissions, don’t have access to your data, and have no ability to
make any modifications.
https://testfabrikstorage001.blob.core.windows.net/adp300/Azure_SQL_Revealed.pdf
Regards, Paloma.-
Posted at https://sl.advdat.com/3veo2dg