Require IP range for whitelisting to access the Azure SQL server database from Power BI service

[PC2790]

Hello,

My Power BI service resides in NORTH EUROPE region and I need the relevant list/range of IPs to be whitelisted in the Firewall settings of Azure in order to enable my report to be able to do schedule refreshes from the Azure SQL database.

Can anyone please help me out here?

Thanks

[technolog]

@PC2790 @v-deddai1-msft @selimovd 

Please share your experience if possible! How do you have everything set up now? Did everything work stably using ip-whitelist? Have you tried using domains?

[selimovd]

Hey @PC2790 ,

you don't really need that. Just go to your Azure SQL and allow Azure services in the firewall settings:

Like this Power BI Service can connect to your database.

Check the following article how to do that:

Virtual network endpoints and rules for databases in Azure SQL Database - Azure SQL Database | Micro...

If you need any help please let me know.

If I answered your question I would be happy if you could mark my post as a solution ✔️ and give it a thumbs up 👍

Best regards

Denis

Blog: WhatTheFact.bi

Follow me: twitter.com/DenSelimovic

[PC2790]

Thankyou @selimovd for a quick response.

I'll ask my Azure Team to check that. One question, does it pose any security risk?

[PC2790]

Hello @selimovd ,

The current settings that we have is this:

Is it right?

[selimovd]

Hey @PC2790 ,

yes, that setting is right.

The safest approach is to have a computer without internet at all. That would make it hard to steal your data. But it would also limit your possibilities.

Except for that, every access is an additional security risk. Maybe one day there is a bug in the connection between Power BI and Azure SQL, nobody knows that. But as it's used quite a lot and Microsoft is investing a lot to keep Azure safe, I think the risk is acceptable. You always have to decide for yourself.

If you need any help please let me know.

If I answered your question I would be happy if you could mark my post as a solution ✔️ and give it a thumbs up 👍

Best regards

Denis

Blog: WhatTheFact.bi

Follow me: twitter.com/DenSelimovic

[PC2790]

This setting doesn't work.

I think that's because I am not using any gateway. I am directly adding credentials in the dataset settings section and directly trying to access the Azure SQL server database.

When I try to refresh the data, it gives e the IP address error and when I add that to the Firewall settings, it works.

The problem is that the IP keeps on changing every now and then and that is why I needed a range of IPs to be whitelisted.

I hope I was able to make you understand my requirement.

[v-deddai1-msft · Accepted solution]

Hi @PC2790 ,

Would you please try to refer to the similar post: 

https://community.powerbi.com/t5/Service/Firewall-setup-IP-used-by-Power-BI-Service-during-data-refr...

https://www.dutchdatadude.com/azure-sql-firewall-settings-for-power-bi-refresh/

https://gist.github.com/nyanhp/ee2367de57c40c8d3ed3eb7dab6b1233

https://medium.com/microsoftazure/how-to-refresh-a-firewall-enabled-azure-data-lake-storage-gen2-dat...

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Best Regards,

Dedmon Dai

[PC2790]

Thankyou @v-deddai1-msft 

It really has some good material to go through.

In the approach where the IPs are getting whitelsited, Is there any way to limit the range for NORTH EUROPE region?

Actually I don't want to go with the gateway approach considering the complexity.

So, want to stil with IP whitelisting thing