Hi, As per this https://video2.skills-academy.com/en-sg/purview/catalog-private-link-end-to-end I have created Purview after December 15, 2023 This creates a managed Microsoft Purview ingestion storage, I want to create following Blob private endpoint linked to a Microsoft Purview ingestion storage. Queue private endpoint linked to a Microsoft Purview ingestion storage. How can I get access to this storage account to create above 2 private endpoint.

@Amit Singh - Thanks for the question and using MS Q&A platform.Make sure you had followedthe instructions further in this guide, you can deploy these private endpoints for an existing Microsoft Purview account: Deploy private endpoints for an existing Microsoft Purview account . Once you created a managed virtual network in the Purview account, you will be automatically seeing: Blob private endpoint is linked to a Microsoft Purview ingestion storage. Queue private endpoint is linked to a Microsoft Purview ingestion storage. Same can be verfied from Azure portal: In order to connect to Azure storage account, you need to Select virtual network(s) to create private endpoints to the storage account. Only selected networks will be able to access these for catalog ingestion scenarios. To connect to Azure Storage acount using Microsoft Purview private endpoint deployment scenarios there are four scenarios which helps to connect. For more details, refer to Use private endpoints for your Microsoft Purview account . If you still need help, please share the step where you are having difficulty. I will be more than happy to assist you. Hope this helps. Do let us know if you any further queries. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

When Purview is created how to access Microsoft Purview ingestion storage?

Accepted answer

PRADEEPCHEEKATLA-MSFT 84,051 Reputation points Microsoft Employee

2024-06-05T10:04:17.1666667+00:00
@Amit Singh - Thanks for the question and using MS Q&A platform.Make sure you had followedthe instructions further in this guide, you can deploy these private endpoints for an existing Microsoft Purview account:

Deploy private endpoints for an existing Microsoft Purview account.

Once you created a managed virtual network in the Purview account, you will be automatically seeing:

Blob private endpoint is linked to a Microsoft Purview ingestion storage.

Queue private endpoint is linked to a Microsoft Purview ingestion storage.

Same can be verfied from Azure portal:

In order to connect to Azure storage account, you need to Select virtual network(s) to create private endpoints to the storage account. Only selected networks will be able to access these for catalog ingestion scenarios.

To connect to Azure Storage acount using Microsoft Purview private endpoint deployment scenarios there are four scenarios which helps to connect.

For more details, refer to Use private endpoints for your Microsoft Purview account.

If you still need help, please share the step where you are having difficulty. I will be more than happy to assist you.

Hope this helps. Do let us know if you any further queries.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Please sign in to rate this answer.
Amit Singh 60 Reputation points

2024-06-07T03:37:14.5766667+00:00

Thanks for your response. I have a followup question -

When I created purview before December 15, 2023, I could see managed resources (see image managed_resource.png) - which creates a storage account. And I have my vnet, nsg rules, private endpoint created to talk to this storage.

But Now after December 15, 2023, when I create Purview I do not see this managed resources tab (see image managed_resource_not_found.png).

Does that mean, now I need to provision my own storage account if I need to achieve similar end to end network isolation?

PRADEEPCHEEKATLA-MSFT 84,051 Reputation points Microsoft Employee

2024-06-10T05:41:50.7033333+00:00

@Amit Singh - Are you not able to follow the steps to create a private endpoint as shown above?

PRADEEPCHEEKATLA-MSFT 84,051 Reputation points Microsoft Employee

2024-06-12T04:58:38.7966667+00:00

@Amit Singh - We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.

Amit Singh 60 Reputation points

2024-06-13T04:42:43.37+00:00

Hi @PRADEEPCHEEKATLA-MSFT - thanks for following up.

Allow me to put perspective where I am coming from.
In my project, we wanted to host all infra ourselves with complete end to end network isolation.
So we contemplating to have self hosted runtime, self provisioned storage account to host purview metadata and self provisioned private end points to internal data sources for scanning.

However if I use managed IR, I have few questions.

How can I forward managed IR logs to log analytics workspace in my subscription?

How the traffic from managed IR to my data sources be flowing?

Is IR, and purview managed storage be under my primary region?

To answer your previous questions

Are you not able to follow the steps to create a private endpoint as shown above?

yes, I am able to setup resources as described in your doc.

PRADEEPCHEEKATLA-MSFT 84,051 Reputation points Microsoft Employee

2024-06-14T06:32:30.25+00:00

@Amit Singh -Regarding your questions about using Managed IR, here are the answers:

To forward Managed IR logs to a Log Analytics workspace in your subscription, you can follow the steps outlined in this documentation. Essentially, you need to create a Log Analytics workspace and configure your Managed IR to send logs to that workspace.

The traffic from Managed IR to your data sources will flow through the private endpoint that you have set up for the data source. This means that the traffic will be completely private and secure, as it will not leave your virtual network.

Yes, both the Managed IR and the Purview managed storage will be located in your primary region. This ensures that your data stays within your region and complies with any data residency requirements.

I hope this helps! Let me know if you have any further questions.
Sign in to comment

Share via

When Purview is created how to access Microsoft Purview ingestion storage?

0 additional answers