Can Power BI Desktop installed on an Azure VM access Azure SAP HANA with different vNet?

Liu, Jia 0 Reputation points
2024-04-30T18:32:28.92+00:00

The article "Connect to SAP HANA with Power BI" (https://learn.microsoft.com/en-us/training/modules/connect-power-platform-to-sap-azure/4-connect-power-bi-systems) states "For SAP HANA running in Azure, Power BI Desktop needs to be installed in an Azure Windows virtual machine located in the same vNet as your Azure SAP HANA."

Is there not a workaround say opening up certain ports or firewall rules if both SAP and Power BI Desktop are in the same domain but different vNet?

This question is related to the following Learning Module

Microsoft Power Platform Training
Microsoft Power Platform Training
Microsoft Power Platform: An integrated set of Microsoft business intelligence services.Training: Instruction to develop new skills.
109 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Marcin Policht 13,175 Reputation points MVP
    2024-04-30T18:43:16.0866667+00:00

    This statement is incorrect.

    This doesn't have to be the same VNet. It can be any VNet that is accessible from the current one directly (peering) or indirectly (hub-and-spoke, Virtual WAN, etc).

    You could access it from anywhere by opening inbound access via public IP address - although that is not recommended due to potential security concerns.


    If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

    hth

    Marcin

    0 comments No comments

  2. Syed Saleem Peera 875 Reputation points Microsoft Vendor
    2024-05-01T04:17:17.2366667+00:00

    Hi Liu, Jia,

    Thank you for reaching out to us on Microsoft Q&A forum. 

    Yes, it's possible for Power BI Desktop installed on an Azure Virtual Machine (VM) to access Azure SAP HANA residing in a different virtual network (vNet). However, to achieve this, you'll need to set up network connectivity between the two virtual networks.

    Steps to follow:

    Virtual Network Peering: You would need to create virtual network peering between the virtual networks containing the Azure VM and the SAP HANA instance. This enables communication between resources in those networks.

    Network Security Groups (NSGs): Ensure that NSGs associated with the subnets containing the Azure VM and SAP HANA allow traffic required for the connection. This might include ports used by SAP HANA and any other necessary protocols.

    Firewall Rules: Configure the firewall rules on the SAP HANA instance to allow inbound connections from the IP address or subnet where the Azure VM resides.

    VPN Gateway (Optional): If the virtual networks are in different Azure regions or need encrypted communication, you might set up a VPN gateway connection between them.

    DNS Resolution: Ensure DNS resolution is set up correctly if hostnames are used for connectivity instead of IP addresses.

    Authentication and Authorization: Ensure that the user or service account used by Power BI Desktop has appropriate permissions to access SAP HANA.

    Testing and Monitoring: Test the connectivity thoroughly and monitor for any issues.If you are still facing any issue, please let us know in the comments. We are glad to help you.

    If the information is helpful, please Accept Answer so that it would be helpful to community members.

    Thank you.

    0 comments No comments