here are some similar questions asked (an answered):
Even though those are for MySQL, it should work for MSSQL by changing the engine or the driver’s use to connect. Usually, the approach is to expose some limited level of modification through a web service. Still, nothing is stopping you from directly accessing the database, albeit depending on the case, could pose a security risk.
Main Reasons the web service approach is taking:
- Performance
- Security
- Best Practice
- Separation of concerns
An exception is if you want to enable direct access because you’re building a sort of database client through mobile.