Forum Discussion
Skilled SharerBest practices to ensure network security for ADLSg2 connection from Fabric
I've created an Azure Data Lake Storage gen2 connection from Fabric. Now, I want to configure ADLSg2 firewall to enable access only from Fabric. Which is the best practice to configure this access rules?
I'm using the connection to create a shortcut in Fabric. When all networks are enabled, it works. So now I want to secure the connection.
Unfortunately Microsoft haven't published a list of Fabric features that are/are not supported in Premium SKUs. You'll need to look at the Considerations and Limitations area of any MS documentation when reading about features, especially when new features are announced.
Ultimately MS are deprecating Premium SKUs https://www.microsoft.com/en-us/licensing/news/power-bi-premium-sku-retirement#:~:text=For%20new%20customers%2C%20the%20Power,capacity%20until%20January%201st%2C%202025.
20 Replies
- AndyDDC
Most Valuable Professional
Hi amaaiia are you using an F SKU for the capacity? If so then if you are running an F64 then you'll be able to create a private endpoint to the storage account when the storage account is disabled from public access.
https://www.serverlesssql.com/managed-private-endpoints-in-microsoft-fabric/
Hi amaaiia
Thanks for using Fabric Community.
You can use Workspace identity in this case.
Please refer to this link:
Workspace identity - Microsoft Fabric | Microsoft Learn
Hope this helps. Please let me know if you have any further questions.
R1k91Super User
amaaiia maybe you can consider "to switch" to F capacity.
it'll happen in anycase next year...
Important update coming to Power BI Premium licensing | Microsoft Power BI Blog | Microsoft Power BI
amaaiiaHi AndyDDC , Anonymous
I understand I can't use Workspace Identities for secure the access to ADLSg2 account through Fabric. So, isn't there another way to restrict access to my ADLSg2 account so that it only accepts traffic from my Fabric account? Does this mean that with Capacities below F64 (or premium Capacities) this process cannot be secured?
I really need to configure my storage account networking for that...
- AndyDDC
You could configure a virtual network, assign the storage account to the vnet, and the create a vnet data gateway in power bi/fabric. Although I believe only dataflow Gen2 are supported.
i may test and blog about this very soon
- amaaiia
It'd be nice to verify if a shortcut can be created to ADLSg2 through data gateway in a vnet scenario.
