Getting started

Db2® SaaS BYOC on Azure is a fully managed, cloud-native database solution that lets you deploy and control data processing infrastructure within your own Azure tenant, ensuring greater security, compliance, and operational visibility.

Key Benefits of Bring Your Own Cloud

The key benefits of Bring Your Own Cloud are:

  • Compliance

    While Software as a Service can meet many standard compliance regulations, a BYOC SaaS allows you to achieve compliance within your own environment. This enables you to meet strict data sovereignty requirements that demand enhanced observability.

  • Security Monitoring and Auditing

    BYOC gives you the ability to monitor and audit the entire environment down to the network level, eliminating blind spots in observability.

  • Connectivity

    BYOC allows you to connect applications within and outside your VNet without requiring special network configurations. You also gain granular control over your network boundaries, which are not shared.

  • Azure Marketplace Integration

    You can leverage your cloud provider credits for your infrastructure as well as Db2 SaaS BYOC components.

Prerequisites

Requirements that must be met before setting up your Db2 SaaS environment on Azure.

The following prerequisites must be met before deploying Db2 SaaS BYOC on Azure:

  1. Azure Administrative Access

    You must have sufficient administrative privileges to deploy an Azure Resource Manager (ARM) template. This deployment will create:

    • Resource groups
    • Managed identities
    • Role assignments
    • Azure Lighthouse delegation for IBM-managed access

    Verify you have sufficient administrative privileges using Azure Portal.

    1. Navigate to the resource group or subscription where you plan to deploy the template.
    2. Go to Access control (IAM).
    3. Click on View my access.
    4. Review the roles assigned to your user account.
    5. Ensure you have a role like:
      • Owner
      • Contributor
      • User Access Administrator
      • Or a custom role that includes:
        • Microsoft.Resources/deployments/*
        • Microsoft.Resources/subscriptions/resourceGroups/write
  2. Azure Subscription Quotas

    Verify that your Azure subscription has adequate resource quotas to support the required infrastructure components (e.g., compute, storage, networking).

    1. Sign in to the Azure Portal.
    2. In the top search bar, type "Quotas" and select "Quotas" from the results.
    3. On the Quotas page, select "My quotas" from the left-hand menu.
    4. Use the filters at the top to narrow down by:
      • Subscription
      • region
      • Provider (e.g., Microsoft.Compute, Microsoft.Network)
    5. You will see a list of quota categories and their current usage vs. limits. You can expand each category to see detailed metrics
  3. An active IBMid is required to subscribe to and provision the Db2 SaaS BYOC service.

    Obtain an IBMId

    1. Go to the IBMid registration page: https://www.ibm.com/account/us-en/signup/register.html
    2. Fill in the required information, including:
      • Business email (this becomes your IBMid)
      • Password
      • First and last name
      • Country or region
      • Company (optional)
    3. Verify your email: IBM will send a verification code to the email address you provided.
    4. Complete multi-factor authentication setup (optional but recommended).

Resources

To access the Db2 SaaS Bring Your Own Cloud (BYOC) API, refer to the following resource:

BYOC Plan: IBM Db2 as a Service (Bring Your Own Cloud) REST API