Add Power BI URLs to your allowlist

The Power BI service requires internet connectivity. The endpoints listed in the following tables should be reachable for customers who use the Power BI service. All endpoints in the Power BI service support HTTP/2.

To use the Power BI service, you must be able to connect to the endpoints marked required in the tables in this article, and to any endpoints marked required on the linked sites. If the link to an external site refers to a specific section, you only need to review the endpoints in that section.

You can also add endpoints that are marked optional to allowlists for specific functionality to work.

The Power BI service requires only TCP Port 443 to be opened for the listed endpoints.

Wildcards (*) represent all levels under the root domain. N/A is used when information isn't available. The Destination(s) column lists domain names and links to external sites, which contain further endpoint information.

Important

The information in this article doesn't apply to Power BI China operated by 21Vianet or Power BI for US government. Read Connect government and global Azure cloud services to learn more about communicating between cloud services.

Authentication

Power BI depends on the required endpoints in the Microsoft 365 authentication and identity sections. To use Power BI, you must be able to connect to the endpoints in the following linked site.

Purpose Destination Port
Required: Authentication and identity See the documentation for Microsoft 365 Common and Office Online URLs N/A

General site usage

For the general use of Power BI, you must be able to connect to the endpoints and linked sites in the following table.

Purpose Destination Port
Required: Backend APIs api.powerbi.com TCP 443
Required: Backend APIs *.analysis.windows.net TCP 443
Required: Backend APIs *.pbidedicated.windows.net TCP 443
Required: Content Delivery Network (CDN) content.powerapps.com TCP 443
Required: Datamart SQL One of the following:
  • datamart.fabric.microsoft.com
  • datamart.pbidedicated.windows.net
  • 1433
    Required: Microsoft 365 integration See the documentation for Microsoft 365 Common and Office Online URLs N/A
    Required: Portal *.powerbi.com TCP 443
    Required: Manage gateways, connections and data policies (preview) gatewayadminportal.azure.com TCP 443
    Required: Service telemetry dc.services.visualstudio.com TCP 443
    Optional: Informational messages arc.msn.com TCP 443
    Optional: NPS surveys nps.onyx.azure.net TCP 443

    Administration

    To perform administrative functions in Power BI, you must be able to connect to the endpoints in the following linked sites.

    Purpose Destination Port
    Required: For managing users and viewing audit logs See the documentation for Microsoft 365 Common and Office Online URLs N/A

    Getting data

    To get data from specific data sources, such as OneDrive, you must be able to connect to the endpoints in the following table. Access to other internet domains and URLs might be required for specific data sources that your organization uses.

    Purpose Destination Port
    Required: AppSource (internal or external apps in Power BI) appsource.microsoft.com
    *.s-microsoft.com
    TCP 443
    Optional: Import files From OneDrive personal See the Required URLs and ports for OneDrive site N/A
    Optional: Power BI in 60-Seconds tutorial video *.doubleclick.net
    *.ggpht.com
    *.google.com
    *.googlevideo.com
    *.youtube.com
    *.ytimg.com
    fonts.gstatic.com
    TCP 443
    Optional: PubNub streaming data sources See the PubNub documentation N/A

    Dashboard and report integration

    Power BI depends on certain endpoints to support your dashboards and reports. You must be able to connect to the endpoints and linked sites in the following table.

    Purpose Destination Port
    Required: Excel integration See the documentation for Microsoft 365 Common and Office Online URLs N/A

    Power BI visuals

    Power BI depends on certain endpoints to view and access Power BI visuals. You must be able to connect to the endpoints and linked sites in the following table.

    Purpose Destination Port
    Required: Import a custom visual from the Marketplace interface or from a file *.powerbi.com
    *.osi.office.net
    *.msecnd.net
    store.office.com
    store-images.s-microsoft.com
    visuals.azureedge.net
    TCP 443
    Optional: Azure Maps https://atlas.microsoft.com
    https://us.atlas.microsoft.com
    https://eu.atlas.microsoft.com
    N/A
    Optional: Bing Maps bing.com
    platform.bing.com
    r.bing.com
    *.virtualearth.net
    TCP 443
    Optional: Esri Maps *.esri.com
    *.arcgis.com
    TCP 443
    Optional: PowerApps See the Required services section from the PowerApps system requirements site N/A
    Optional: Visio See the documentation for Microsoft 365 Common and Office Online URLs, as well as SharePoint Online and OneDrive for work or school N/A

    Power BI OneDrive and SharePoint integration

    Power BI depends on certain endpoints to support integration with OneDrive for Business and SharePoint Online. You must be able to connect to the endpoints and linked sites in the following table.

    Purpose Destination Port
    Required: OneDrive and SharePoint integration See the documentation for SharePoint Online and OneDrive for Business URLs N/A

    Power BI links to other related sites. These sites host documentation, support, new feature requests, and more. Access to these sites doesn't affect the functionality of Power BI, so adding them to allowlists is optional.

    Purpose Destination Port
    Optional: Community site community.powerbi.com
    oxcrx34285.i.lithium.com
    TCP 443
    Optional: Documentation site learn.microsoft.com
    img-prod-cms-rt-microsoft-com.akamaized.net
    statics-uhf-eas.akamaized.net
    cdnssl.clicktale.net
    ing-district.clicktale.net
    TCP 443
    Optional: Download site (for Power BI Desktop and other products) download.microsoft.com TCP 443
    Optional: External redirects aka.ms
    go.microsoft.com
    TCP 443
    Optional: Ideas feedback site ideas.powerbi.com
    powerbi.uservoice.com
    TCP 443
    Optional: Power BI site - landing page, learn more links, support site, download links, partner showcase, and so on. powerbi.microsoft.com TCP 443
    Optional: Power BI Developer Center dev.powerbi.com TCP 443
    Optional: Support site support.powerbi.com
    s3.amazonaws.com
    *.olark.com
    logx.optimizely.com
    mscom.demdex.net
    tags.tiqcdn.com
    TCP 443