Does private link for "Portal.adf.azure.com" sub-resource is required to connect with ADF from App Service using Managed Identity in Landing Zone

Rajoli Hari Krishna 316 Reputation points
2024-06-18T06:17:50.31+00:00

We have deployed the Azure App Service and Data factory in Azure Landing Zone (Private Network).

Scenario 1: We have enabled the private endpoint for data factory resource type. Using this private endpoint - private link, we copied the data from Standard subscription to Enterprise Scale subscription storage accounts with the Azure Self-hosted integration Runtime.

This is successful.

Scenario 2:

We are connecting with the ADF from the App service (.NET) using App Service Managed Identity and given the data factory contributor access under the IAM of the App service.

Do we need the private endpoint for portal.adf.azure.com resource type to connect with the ADF from the Azure App service using app service managed identity?

Please help me.

Azure Data Factory
Azure Data Factory
An Azure service for ingesting, preparing, and transforming data at scale.
9,978 questions
Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
7,248 questions
{count} votes

Accepted answer
  1. PRADEEPCHEEKATLA-MSFT 83,886 Reputation points Microsoft Employee
    2024-06-18T08:59:25.93+00:00

    @Rajoli Hari Krishna - Thanks for the question and using MS Q&A platform.

    Based on the provided information, it seems that you have already enabled the private endpoint for the Data Factory resource type and successfully copied data from Standard subscription to Enterprise Scale subscription storage accounts with the Azure Self-hosted integration Runtime.

    Regarding your question about connecting to ADF from the Azure App service using App Service Managed Identity, it depends on your specific scenario. If you want to access the ADF portal from the App service using Managed Identity, then you would need to create a private endpoint for the "portal.adf.azure.com" sub-resource. However, if you are only using the Managed Identity to access the ADF APIs or perform data integration tasks, then you may not need to create a private endpoint for the portal sub-resource.

    In general, private endpoints are used to securely access Azure services over a private connection. If you want to access the ADF portal securely from your App service, then creating a private endpoint for the portal sub-resource would be a good option. However, if you only need to access the ADF APIs or perform data integration tasks, then you may not need to create a private endpoint for the portal sub-resource.

    Hope this helps. Do let us know if you any further queries.


    If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful