What is the proper way to grant permissions to add azure ad users/ applications on an azure sql database using Pulumi ? Doing that requires to execute an sql command on the database and I don't know where to put this code in my Pulumi program:

CREATE USER [<identity-name>] FROM EXTERNAL PROVIDER;
ALTER ROLE db_datareader ADD MEMBER [<identity-name>];
ALTER ROLE db_datawriter ADD MEMBER [<identity-name>];
GO

I have seen there is a new Command package in Pulumi, could this be a good idea to use that? What are the other options? Dynamic provider?

Command package, Dynamic provider, Build your own provider. K8 job, function or do it outside of Pulumi

Has anyone done it before and has a sample to share?

I used this example to create a small custom provider last year https://github.com/pulumi/pulumi-provider-boilerplate

Thank you for your answers. Indeed building my own provider seems time consuming, a bit too much. I will maybe give a try to Command Package. Dynamic providers could be an interesting option but there are not yet available in .NET unfortunately which is what I am using in my stack.

Yes it is unfortunate. I am also waiting on this feature