Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

The Power BI Data Visualization World Championships is back! Get ahead of the game and start preparing now! Learn more

Reply

Power BI Tenant Migration – Gateway VM Setup

Hi Team,

 

We are migrating Power BI from Infy tenant → TATA tenant.

 

Current Infrastructure:
Virtual Machine in Infy tenant hosting Power BI Gateway.
Data sources: Oracle and SQL Server (on separate on-prem servers).

 

New Infrastructure:
A new Virtual Machine will be created in the TATA tenant to host the Power BI Gateway and will connect existing Oracle and SQL Server .

 

Questions:
a. From the new Gateway VM, do we need to open the following ports and why do we need to open: (only outbound and no inbound)
TCP 443 (default)
TCP 5671, 5672
TCP 9350–9354

 

b. In this setup, what would be considered the source server and the target server for firewall/network configuration?
Source -TATA VM and Target - Power BI Cloud endpoints(*.powerbi.com, *.servicebus.windows.net), is this correct.

 

Sorry for the noob question.

 

Thanks,

 

1 ACCEPTED SOLUTION
v-veshwara-msft
Community Support
Community Support

Hi @YashikaAgrawal ,

Thanks for posting in Microsoft Fabric Community.

Thanks @GilbertQ for your inputs.

 

For your setup, the gateway VM requires outbound connectivity on TCP 443 to communicate with the Power BI service, and TCP 5671, 5672, and 9350–9354 are required for Azure Service Bus and Azure Relay messaging.

For Reference: Adjust communication settings for the on-premises data gateway | Microsoft Learn

 

Regarding the source and target for firewall/network configuration, your understanding is correct: the source is the gateway VM in the TATA tenant, and the target is the Power BI and Azure endpoints such as *.powerbi.com and *.servicebus.windows.net. It’s recommended to allow outbound access to these FQDNs rather than hardcoding IPs, as endpoints can change over time.

 

For the Oracle question, if the gateway VM needs to connect to an on-premises Oracle database, you should install the Oracle client on the same VM where the gateway is running. The gateway uses the Oracle client libraries locally to communicate with Oracle, so the client must be present on the VM itself. Ensure the client version is compatible with your database and the gateway.

Microsoft documentation provides guidance here: Manage your data source - Oracle - Power BI | Microsoft Learn

 

Hope this helps. Please reach out for further assistance.

Thank you.

View solution in original post

3 REPLIES 3
v-veshwara-msft
Community Support
Community Support

Hi @YashikaAgrawal ,

Thanks for posting in Microsoft Fabric Community.

Thanks @GilbertQ for your inputs.

 

For your setup, the gateway VM requires outbound connectivity on TCP 443 to communicate with the Power BI service, and TCP 5671, 5672, and 9350–9354 are required for Azure Service Bus and Azure Relay messaging.

For Reference: Adjust communication settings for the on-premises data gateway | Microsoft Learn

 

Regarding the source and target for firewall/network configuration, your understanding is correct: the source is the gateway VM in the TATA tenant, and the target is the Power BI and Azure endpoints such as *.powerbi.com and *.servicebus.windows.net. It’s recommended to allow outbound access to these FQDNs rather than hardcoding IPs, as endpoints can change over time.

 

For the Oracle question, if the gateway VM needs to connect to an on-premises Oracle database, you should install the Oracle client on the same VM where the gateway is running. The gateway uses the Oracle client libraries locally to communicate with Oracle, so the client must be present on the VM itself. Ensure the client version is compatible with your database and the gateway.

Microsoft documentation provides guidance here: Manage your data source - Oracle - Power BI | Microsoft Learn

 

Hope this helps. Please reach out for further assistance.

Thank you.

GilbertQ
Super User
Super User

Hi @YashikaAgrawal 

 

You will only need to open up TC port 443 in order to connect to the Power BI service. In terms of the endpoints, I am not quite sure. Typically I've just asked clients to open up an outbound connection and that works really well because those endpoints could change over time.





Did I answer your question? Mark my post as a solution!

Proud to be a Super User!







Power BI Blog

thanks, for reply, Do we need to install Oracle client in Virtual machine?

Helpful resources

Announcements
Power BI DataViz World Championships

Power BI Dataviz World Championships

The Power BI Data Visualization World Championships is back! Get ahead of the game and start preparing now!

December 2025 Power BI Update Carousel

Power BI Monthly Update - December 2025

Check out the December 2025 Power BI Holiday Recap!

FabCon Atlanta 2026 carousel

FabCon Atlanta 2026

Join us at FabCon Atlanta, March 16-20, for the ultimate Fabric, Power BI, AI and SQL community-led event. Save $200 with code FABCOMM.