- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ā08-22-2024 09:45 AM
Hi all,
The organisation Iām working for has a data engineering team using medallion architecture and wants to share materialised views in the gold layer to members of the organisation who do not have access to the Vnet to be delivered in power BI reports.
Currently DBR is using ADLS v2 as its external storage. Security requirements demand that the storage public networking is disabled. We are able to add and transform data in the external storage using a managed identity, which has been added to the firewall exceptions.
I have tried creating a delta share however when ingesting to PBI there is an odbc error that is only fixed by enabled public access to the storage account.
I have also tried using partner connect to connect PBI directly however getting a similar issue.
Is there a way to achieve this goal?
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ā08-22-2024 09:53 AM - edited ā08-22-2024 09:55 AM
Hi @mushroom_posse ,
If storage account has disabled public access then you basically have 3 options:
- setup VPN Gateway ( and use VPN to connect to your VNET)
- setup Express Route (similar to option 1, faster but pricier)
- manually add IPs to storage account firewall
If your organization using firewall you can also add rules that will allow incoming traffic to your storage account from certain pool of IP addresses/FQDNs etc.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ā08-22-2024 09:53 AM - edited ā08-22-2024 09:55 AM
Hi @mushroom_posse ,
If storage account has disabled public access then you basically have 3 options:
- setup VPN Gateway ( and use VPN to connect to your VNET)
- setup Express Route (similar to option 1, faster but pricier)
- manually add IPs to storage account firewall
If your organization using firewall you can also add rules that will allow incoming traffic to your storage account from certain pool of IP addresses/FQDNs etc.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ā08-23-2024 12:35 AM - edited ā08-23-2024 12:36 AM
Thanks for that information will take it to the infrastructure team š

