Delta sharing gold layer data within organisation but outside of Vnet

[mushroom_posse]

Hi all,

The organisation I’m working for has a data engineering team using medallion architecture and wants to share materialised views in the gold layer to members of the organisation who do not have access to the Vnet to be delivered in power BI reports.

Currently DBR is using ADLS v2 as its external storage. Security requirements demand that the storage public networking is disabled. We are able to add and transform data in the external storage using a managed identity, which has been added to the firewall exceptions.

I have tried creating a delta share however when ingesting to PBI there is an odbc error that is only fixed by enabled public access to the storage account.

I have also tried using partner connect to connect PBI directly however getting a similar issue.

Is there a way to achieve this goal?

[szymon_dybczak · Accepted solution]

Hi @mushroom_posse ,

If storage account has disabled public access then you basically have 3 options:

 - setup VPN Gateway ( and use VPN to connect to your VNET)
 - setup Express Route (similar to option 1, faster but pricier)
 - manually add IPs to storage account firewall 

If your organization using firewall you can also add rules that will allow incoming traffic to your storage account from certain pool of IP addresses/FQDNs etc.

[mushroom_posse]

Thanks for that information will take it to the infrastructure team 😃