Forum Discussion
Connector Creation not working for Azure Storage Table
Hello!
I am using the Power BI desktop app which connects to my data successfully, and when I publish up to the app.powerbi.com, my data connections no longer work. I receieve the following message:
Unable to update connection credentials.
Invalid connection credentials.
Details:
The credentials provided for the AzureTables source are invalid.
So when I go and create a new connector with the account name and access key I receive the same error. My Storage account IS behind a vpn, however when I whitelist the Power BI IP I'm still seeing error. I talked with MSFT on the storage account side and they see no errors on their side, so it doesn't seem to be reaching my Storage Account. Any ideas? Thanks!
Hi KevinDavison
The issue occurs because Power BI Desktop can connect to your Azure Storage Account (since it runs locally with VPN access), but Power BI Service cannot due to network restrictions. When publishing the report, Power BI Service operates from Microsoft’s cloud, which lacks direct access to your storage account behind a VPN. Even after whitelisting Power BI IPs, the service may still be unable to reach the data source. To resolve this, you can set up an On-Premises Data Gateway, which acts as a bridge between Power BI Service and your VPN-protected storage. Alternatively, you can configure Azure Private Endpoints to allow Power BI Service to securely connect without needing a public IP. Another option is using Azure Active Directory (AAD) authentication instead of an account key for a more secure and reliable connection. Lastly, ensure that data source credentials in Power BI Service are correctly set up with OAuth2 or the appropriate authentication method. Since Microsoft confirmed no errors on the storage account side, the issue is likely due to Power BI Service being unable to establish a direct connection.
7 Replies
- GilbertQ
Super User
Hi KevinDavison
This will not work in the current setup because you are behind a vpn. You need to use a VNET Gateway in order to be able to connect successfully to the azure storage tables.
What is a virtual network (VNet) data gateway | Microsoft Learn
Hi GilbertQ!
Major apologies, the storage account is on a VNET Gateway, and the IP is whitelisted. My only options for connection seems to be the Access Key only. Anything else I can try?
v-sgandrathiCommunity Support
Hello KevinDavison,
Thankypu for reachingout to Microsoft Fabric Community Forum.
Use Private Endpoint or Service Endpoints:
- Even with VNet Gateway and IP whitelisting, Power BI may need Private Endpoint or Service Endpoints to access the storage account.
- Private Endpoint secures access via the VNet, avoiding public IPs.
- If Private Endpoint is too complex, Service Endpoints can simplify routing Power BI traffic to your VNet.
Ensure Power BI can access the Storage Account:
- Double-check that Power BI has access through the VNet Gateway. Even with IP whitelisting, Power BI may not route properly if the VNet Gateway is not set up correctly to handle external requests to your storage account.
Check Firewall and NSG Settings:
- Since you’re behind a VNet Gateway, make sure there are no Network Security Group (NSG) rules blocking traffic to your Azure Storage account.
Update Access Key:
- Regenerate the Access Key to ensure that it is the correct key and hasn't expired or been rotated.
Here is the microsoft Link on private endpoints for your reference:
Private endpoints for secure access to Power BI for on-premises clients - Power BI | Microsoft LearnPlease Accept as solution if this meets your needs and a Kudos would be appreciated.
- v-sgandrathi
Hi KevinDavison,
As we have not received a response from you yet, I would like to confirm whether you have successfully resolved the issue or if you require further assistance.
If the issue has been resolved, please mark the helpful reply as a "solution" to indicate that the question has been answered and to assist others in the community.
Thank you for your cooperation. Have a great day.
- Even with VNet Gateway and IP whitelisting, Power BI may need Private Endpoint or Service Endpoints to access the storage account.
- Poojara_D12
Hi KevinDavison
The issue occurs because Power BI Desktop can connect to your Azure Storage Account (since it runs locally with VPN access), but Power BI Service cannot due to network restrictions. When publishing the report, Power BI Service operates from Microsoft’s cloud, which lacks direct access to your storage account behind a VPN. Even after whitelisting Power BI IPs, the service may still be unable to reach the data source. To resolve this, you can set up an On-Premises Data Gateway, which acts as a bridge between Power BI Service and your VPN-protected storage. Alternatively, you can configure Azure Private Endpoints to allow Power BI Service to securely connect without needing a public IP. Another option is using Azure Active Directory (AAD) authentication instead of an account key for a more secure and reliable connection. Lastly, ensure that data source credentials in Power BI Service are correctly set up with OAuth2 or the appropriate authentication method. Since Microsoft confirmed no errors on the storage account side, the issue is likely due to Power BI Service being unable to establish a direct connection.
Yes, this was the reason. Thanks for the explanation!
