Unanswered

how to configure export to data lake with a private end point

(1) Share

Report

Posted on by bpsearle

I would like to configure ADLS Gen 2 so it is not open to the internet, it will be on a vnet with a private end point. However, the data verse export to data lake cannot see the ADLS. What do we need to configure to enable this?

Categories:

Microsoft Dataverse with Power Apps

I have the same question (0)

All responses (5)

Answers (0)

ChrisPiasecki 6,422 Most Valuable Professional on at

Like (0)

Report
Hi @bpsearle,

Is the storage account with the Data Lake in the same region as your Power Platform environment? If so the services connect to each other internally using private UP addresses and not public, therefore you can't leverage public firewall rules.

There a couple things you could try:

Set up a VM in the same private network as the storage account and try using that machine to connect to configure the export to data lake. ; OR

Temporarily open up the virtual network of the storage account and see if you can configure it. Once it's configured lock down the network again and see if it runs.

If all else fails, you can try putting the storage account in a different region and configure firewall rules to enable the public IPs of the Power Apps services. This may not be an option depending on your data residency / security requirements.

Also ensure you've followed all the prerequisite steps to configure the storage account. Additional references below:

https://docs.microsoft.com/en-us/powerapps/maker/data-platform/connect-azure-data-lake-storage-for-dataflow#considerations-and-limitations

https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security?tabs=azure-portal

---
Please click Accept as Solution if my post answered your question. This will help others find solutions to similar questions. If you like my post and/or find it helpful, please consider giving it a Thumbs Up.

Was this reply helpful? Yes No
bpsearle 6 on at

Like (1)

Report

Hey Chris, thank you for your reply
The ADLS is in the same region as the data verse.
I have removed the 'private endpoint' from ADLS to see if that made any difference and it didn't.
Next I looked at the 'network' configuration for the ADLS and it seems that when you change it from 'all networks' to 'selected networks' even with the 'Allow trusted Microsoft services to access this storage account' option enabled it stops the data verse 'export to data lake' from working.
So it looks to me as though we need to configure ADF pipelines to load data into ADLS from the data verse if you want your ADLS secured with no public IP access. Creating an ADF pipeline is a lot more work than using the out of the box 'export to data lake' feature. Or am i missing something?

Was this reply helpful? Yes No
MB-08081650-0 8 on at

Like (0)

Report

hello chris and bpsearle,

Is there any update-progress on the restriction of ADLS connectivity to selected networks?

thanks in advance

mehmet başerdem

Was this reply helpful? Yes No
prenglery 2 on at

Like (0)

Report

Is there an update to this? running into same issue.

Was this reply helpful? Yes No
puja 2 on at

Like (0)

Report

Hi ChrisPiasecki,
Even we have the same setup and we are also struggling with the same issue.If we have to allow ip address range of powerApp ,from where we will get the ip ranges ?or maybe we have to go with other networking configuration?

Look Forward to Hearing from You.

Was this reply helpful? Yes No