PublicNetworkAccessDenied

Anonymous
2022-09-28T15:51:18.883+00:00

hello,
i want to use Private endpoints in my virtual network to access synapse what i must do?
it is give me this error when i try to linked service with source from synapse

245625-image.png

Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
656 questions
Azure Virtual Network
Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
2,408 questions
Azure Synapse Analytics
Azure Synapse Analytics
An Azure analytics service that brings together data integration, enterprise data warehousing, and big data analytics. Previously known as Azure SQL Data Warehouse.
4,872 questions
Azure Private Link
Azure Private Link
An Azure service that provides private connectivity from a virtual network to Azure platform as a service, customer-owned, or Microsoft partner services.
504 questions
0 comments No comments
{count} vote

1 answer

Sort by: Most helpful
  1. Bhargava-MSFT 30,891 Reputation points Microsoft Employee
    2022-09-29T22:43:40.107+00:00

    Hello @Anonymous ,
    Welcome to the MS Q&A platform.

    If you want to use the managed virtual networks and private endpoints in Azure synapse, you need to enable 'Managed virtual network' on the networking tab during the Synapse workspace creation.

    In case, if you created the workspace without the 'Managed virtual network' enabled, then you can't go back and enable it after creating the workspace. This needs to be enabled during the workspace creation.

    If you disable Public network access, You must use private endpoints to connect to your workspace when this setting is disabled.

    Once you have enabled the managed virtual networks, here are the steps to use the managed Vnet and private endpoints

    1) create Azure integration runtime within a managed Vnet
    2) create managed private endpoint to azure services(ex: AzureSQL, blob, etc)
    3) Approve private endpoint request a private link center. You can approve them from the 'Private link center' or directly from the 'Azure services'

    Please let me know if you have any further questions.

    246292-image.png

    Docs:

    https://video2.skills-academy.com/en-us/azure/synapse-analytics/security/connectivity-settings

    https://video2.skills-academy.com/en-us/azure/synapse-analytics/security/synapse-workspace-managed-vnet

    2 people found this answer helpful.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.