This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(76.8, 90%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EG2%3C/text%3E%3C/svg%3E)
How does the ‘Allow public access from any Azure service within Azure to this server’ function from a technical perspective? I understand this setting allows all Azure services and other customer resources to connect, but behind the scenes, how is the list of IP ranges for Azure services maintained if say a new IP address/range is added for the PowerBI service? If new ranges are added for a service, is there a chance that customers could experience rejected connections before the changes propagate?
An Azure network security service that is used to protect Azure Virtual Network resources.
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.
I understand that you would like to know more about "Allow public access from any Azure service within Azure to this server". Sam Cogan 's answer is correct.
Azure internally maintains the list of IP Addresses for the services and these IP Addresses are added as Exceptions in addition to the Network Rules you configure.
See : Grant access to trusted Azure services
Some Azure services operate from networks that you can't include in your network rules. You can grant a subset of such trusted Azure services access to the storage account, while maintaining network rules for other apps. These trusted services will then use strong authentication to connect to your storage account.
To address your query, "If new ranges are added for a service, is there a chance that customers could experience rejected connections before the changes propagate?"
Kindly let us know if this helps or you need further assistance on this issue.
Thanks,
Kapil
Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.
Answer accepted by question author
Microsoft maintains a list of all Azure IP ranges, which you can find here. This is updated on a regular basis, and I would assume that the internal list of IPs Microsoft maintain for allowing access from Azure services is similar.