What permissions are needed to copy databases in SQL Azure

Question

I wrote a little app to backup SQL Azure databases using the very usefull 'CREATE AS COPY OF' command in SQL Azure. e.g.

CREATE DATABASE MyNewDB AS COPY OF MyOldDB

I run this command with the admin login (first login you get when creating a server). My Question: What are the minimal permissions a new login would need to execute the above command?

So far here's what I've done:

-- IN MASTER DB --
CREATE LOGIN DBCreator WITH PASSWORD = '?????????????'
CREATE USER DBCreator FROM LOGIN DBCreator;
EXEC sp_addrolemember 'dbmanager', 'DBCreator';

-- IN MyOldDB --
-- (I ran this stuff when the previous commands didn't do it) --
CREATE USER DBCreator FROM LOGIN DBCreator;
EXEC sp_addrolemember 'db_datareader', 'DBCreator';  -- 

And the result when running the above CREATE DATABASE command:

CREATE DATABASE permission denied in database 'MyOldDB'.

Answer 1

I could not add the db_owner role to new login, the command

EXEC sp_addrolemember 'db_owner', 'NewLogin'

throws the error

Cannot alter the role 'db_owner', because it does not exist or you do not have permission.

But using the dbmanager role works

EXEC sp_addrolemember 'dbmanager', 'NewLogin'

There is useful information in the article Managing Databases and Logins in Windows Azure SQL Database.