Share via

PublicNetworkAccessDenied

Anonymous
2022-09-28T15:51:18.883+00:00

hello,
i want to use Private endpoints in my virtual network to access synapse what i must do?
it is give me this error when i try to linked service with source from synapse

245625-image.png

Azure Firewall
Azure Firewall

An Azure network security service that is used to protect Azure Virtual Network resources.

Azure Virtual Network
Azure Virtual Network

An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.

Azure Synapse Analytics
Azure Synapse Analytics

An Azure analytics service that brings together data integration, enterprise data warehousing, and big data analytics. Previously known as Azure SQL Data Warehouse.

Azure Private Link
Azure Private Link

An Azure service that provides private connectivity from a virtual network to Azure platform as a service, customer-owned, or Microsoft partner services.

0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Bhargava-MSFT 31,361 Reputation points Microsoft Employee Moderator
    2022-09-29T22:43:40.107+00:00

    Hello @Anonymous ,
    Welcome to the MS Q&A platform.

    If you want to use the managed virtual networks and private endpoints in Azure synapse, you need to enable 'Managed virtual network' on the networking tab during the Synapse workspace creation.

    In case, if you created the workspace without the 'Managed virtual network' enabled, then you can't go back and enable it after creating the workspace. This needs to be enabled during the workspace creation.

    If you disable Public network access, You must use private endpoints to connect to your workspace when this setting is disabled.

    Once you have enabled the managed virtual networks, here are the steps to use the managed Vnet and private endpoints

    1) create Azure integration runtime within a managed Vnet
    2) create managed private endpoint to azure services(ex: AzureSQL, blob, etc)
    3) Approve private endpoint request a private link center. You can approve them from the 'Private link center' or directly from the 'Azure services'

    Please let me know if you have any further questions.

    246292-image.png

    Docs:

    https://learn.microsoft.com/en-us/azure/synapse-analytics/security/connectivity-settings

    https://learn.microsoft.com/en-us/azure/synapse-analytics/security/synapse-workspace-managed-vnet

    Was this answer helpful?

    2 people found this answer helpful.

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.