Support for private endpoints is half baked

[hecflores]

Based on the documentation it makes sense but it still raises a question.

I created the required private endpoints using our autromation using ARM templates with the following coding snippet:

        {
            "name": "[concat(parameters('factoryName'), '/default/{Private Endpoint Name}')]",
            "type": "Microsoft.DataFactory/factories/managedVirtualNetworks/managedPrivateEndpoints",
            "apiVersion": "2018-06-01",
            "properties": {
                "privateLinkResourceId": "[parameters('VirtualNetwork_{Private Endpoint Name}_privateLinkResourceId')]",
                "groupId": "[parameters('VirtualNetwork_{Private Endpoint Name}_groupId')]"
            },
            "dependsOn": [
                "[concat(variables('factoryId'), '/managedVirtualNetworks/default')]",
                "[variables('factoryId')]"
            ]
        }

This was done with the following services:

• (2) Function Apps
  • VirtualNetwork_{Private Endpoint Name}_privateLinkResourceId - Resource Id of Function Apps
  • VirtualNetwork_{Private Endpoint Name}_groupId - sites
• (1) SQL Server
  • VirtualNetwork_{Private Endpoint Name}_privateLinkResourceId = Resource Id of SQL Server
  • VirtualNetwork_{Private Endpoint Name}_groupId = sqlServer
• (1) Data Lake Service
  • VirtualNetwork_{Private Endpoint Name}_privateLinkResourceId = Resource Id of Storage Account
  • VirtualNetwork_{Private Endpoint Name}_groupId = dfs
• (1) Key Vault Service
  • VirtualNetwork_{Private Endpoint Name}_privateLinkResourceId = Resource Id of Key Vault
  • VirtualNetwork_{Private Endpoint Name}_groupId = vault
• (1) Fhir PaaS Service
  • VirtualNetwork_{Private Endpoint Name}_privateLinkResourceId = Resource Id of Fhir PaaS Service
  • VirtualNetwork_{Private Endpoint Name}_groupId = fhir

Provisioning was successful, but the following services don't get approved automatically:

• Function Apps (sites)
• Fhir PaaS Service (fhir)

If I try to approval through UI manuelly I get the following error:

If I try to approve through PowerShell, I get the following error:

My question is this:

• Why is it that not all groups are supported for private endpoints using a "managed" virtual network when all groups are supported when using a "non-managed" virtual network. Im having a hard time understanding why these types are not supported.

• What is the root cause for the errors I am seeing when trying to approve?

  Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: 0b7d5707-9f14-db2b-00fb-5edd7bbcd06f
• Version Independent ID: 2a0f8297-bdf7-3056-121e-963140ec0703
• Content: Managed virtual network & managed private endpoints - Azure Data Factory
• Content Source: articles/data-factory/managed-virtual-network-private-endpoint.md
• Service: data-factory
• GitHub Login: @nabhishek
• Microsoft Alias: abnarain

[KranthiPakala-MSFT]

@hecflores Thanks for reaching out! We have assigned the issue to the content author to further review the ask and provide an update as appropriate.

@nabhishek - Could you please have a look at the above ask? - Thanks

[jonburchel]

Hi @hecflores, and thanks for your question. This root cause could be due to configuration or conditions specific to your environment. Our support team can help investigate it further. Please open a new ticket by navigating to the Azure portal page for your data factory and then selecting New support request under Support + troubleshooting:

Since this this is an issue with the product and not the documentation per se, I will close this out now, but if you have further questions you can continue the discussion here too.

please-close