diff --git a/src/HanaOnAzure/custom/New-AzSapMonitorProviderInstance.ps1 b/src/HanaOnAzure/custom/New-AzSapMonitorProviderInstance.ps1
index e2fbe8133e17..a4d971b30ce4 100644
--- a/src/HanaOnAzure/custom/New-AzSapMonitorProviderInstance.ps1
+++ b/src/HanaOnAzure/custom/New-AzSapMonitorProviderInstance.ps1
@@ -203,7 +203,8 @@ function New-AzSapMonitorProviderInstance {
                     hanaDbName     = $HanaDatabaseName
                     hanaDbSqlPort  = $HanaDatabaseSqlPort
                     hanaDbUsername = $HanaDatabaseUsername
-                    hanaDbPassword = ConvertFrom-SecureString $HanaDatabasePassword -AsPlainText
+                    # cannot use `ConvertFrom-SecureString -AsPlainText`, requires powershell >= 7
+                    hanaDbPassword = [System.Runtime.InteropServices.marshal]::PtrToStringAuto([System.Runtime.InteropServices.marshal]::SecureStringToBSTR($HanaDatabasePassword))
                 }
             }
             'ByKeyVault' {