Set up an Azure Private Link

Azure Private Link lets Dynamics 365 Customer Insights - Data connect to your Azure Data Lake Storage account over a private endpoint in your virtual network. For data in a storage account, which isn't exposed to the public internet, Private Link enables the connection to that restricted network.

Important

Minimum role requirement to set up a Private Link connection:

In Customers Insights you can create private links in the following ways:

  • When creating a new Customer Insights - Data environment for which you would like to Use your own Azure Data Lake Storage account that is protected by your virtual network.
  • When creating a data source for which the data is stored in your protected account.
  • Directly from the Settings > Permissions > Private Links page in Customer Insights - Data.

Regardless of the method you use to create the Private Link, it shows under the Settings > Permissions > Private Links tab in Customer Insights - Data.

When creating a Customer Insights - Data environment that connects to your virtual network protected storage:

  1. Select Enable Azure Private Link.

    Private endpoint creation.

  2. Select Create Private Link to initiate the creation process.

  3. Approve the Private Link in the Azure portal.

  4. Once all links are approved, select Validate Private Link. Upon successful validation, you can continue configuring your new environment.

When creating an Azure Data Lake Storage data source that needs to connect to a storage protected by a virtual network, follow the same steps as described under Setting up a private link when creating a Customer Insights - Data environment.

  1. In Customer Insights - Data, go to Settings > Permissions and select the Private Links tab.

  2. Select Add Private Link.

    The Add Private Link pane lists storage accounts in your tenant that you can see.

  3. Select the subscription, resource group, and storage account.

  4. Review the data privacy and compliance and select I agree.

  5. Select Save.

After configuring the Private Link between Customer Insights - Data and your virtual network protected storage, four Private Links show on the Private Links tab in Customer Insights - Data with a status of Pending.

  1. In the Azure portal, go to your Data Lake Storage account, and select Networking > Private endpoints connections to see the four new Private Links.

  2. Select Yes to approve them.

    Tip

    For easy identification, consider adding a description when approving the Private Links.

    Description for the private endpoint approval step.

  3. In Customer Insights - Data, go to Settings > Permissions and select the Private Links tab. The Private Links now show the status Approved.

  4. Continue to add your data sources that are linked to your protected storage.

  1. In Customer Insights - Data, go to Settings > Permissions and select the Private Links tab.

  2. Select the storage account name for which you would like to delete the Private Links.

  3. Select Delete.