Custom skill integration Azure AI Search

Somdeep Niyogi (external) 1 Reputation point
2024-05-15T18:18:35.6533333+00:00

0

I have a requirement to crawl an Azure SQL server from Azure AI search. The SQL server exists in different VNET and I have created a Shared Private Link to connect. The Indexer works fine without any problem.

As soon as I add a custom webapi skill the indexer starts complaining with an error

Cannot open server 'sqls-XXX-dev' requested by the login. Client with IP address '51.XXX.XXX.140' is not allowed to access the server.

Can anyone kindly explain what am I doing wrong?

Integrate Custom Skill with SQL Server with Shared Private Access. The SQL server has not public IP enabled.

Azure AI Search
Azure AI Search
An Azure search service with built-in artificial intelligence capabilities that enrich information to help identify and explore relevant content at scale.
759 questions
SQL Server
SQL Server
A family of Microsoft relational database management and analysis systems for e-commerce, line-of-business, and data warehousing solutions.
12,917 questions
{count} votes

2 answers

Sort by: Most helpful
  1. Grmacjon-MSFT 16,776 Reputation points
    2024-05-15T22:00:12.18+00:00

    Hi @Somdeep Niyogi (external) Thanks for bringing this our attention.

    This might be related to firewall rules that are blocking the IP address of your custom web API skill from accessing the SQL server. When did you start facing this issue?

    The error message means that the client’s IP address is not allowed to access the server, which is a common issue when the server’s firewall settings do not include the client’s IP address in the allowed list.

    To resolve this, you can consider the following steps:

    1. Use the Azure portal to create a server-level firewall rule that allows the IP address of your custom web API skill to access the SQL server. You can do this by navigating to the SQL server’s settings in the Azure portal, then going to the “Firewalls and virtual networks” section.
    2. Alternatively, you can use Transact-SQL commands such as sp_set_firewall_rule on the master database to create a firewall rule for the IP address or address range of your custom web API skill. This can be done by connecting to the master database of your SQL server and executing the appropriate Transact-SQL command.

    Hope that helps.

    Grace


  2. LucyChenMSFT-4874 1,580 Reputation points
    2024-05-16T01:59:50.3533333+00:00

    Hi @Somdeep Niyogi (external) ,

    Thanks for your information.

    This issue can be solved by configuring the Firewall and manage the IP addresses in SQL Server.

    Please follow the steps in this article:

    The overview page for your server opens. It shows the fully qualified server name (such as mynewserver20170403.database.windows.net) and provides options for further configuration.

    1. To set a server-level rule from this page, select Networking from the Settings menu on the left side.
    2. Add a rule in the Firewall rules section to add the IP address of the computer that you're using, and then select Save. A server-level IP firewall rule is created for your current IP address.

    If you have any concerns, please feel free to share with us.

    Best regards,

    Lucy Chen


    If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our Documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    https://docs.microsoft.com/en-us/answers/support/email-notifications