You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/search/search-index-azure-sql-managed-instance-with-managed-identity.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -31,7 +31,7 @@ Before learning more about this feature, it is recommended that you have an unde
31
31
32
32
To assign read permissions on SQL Managed Instance, you must be an Azure Global Admin with a SQL Managed Instance. See [Configure and manage Azure AD authentication with SQL Managed Instance](/azure/azure-sql/database/authentication-aad-configure) and follow the steps to provision an Azure AD admin (SQL Managed Instance).
33
33
34
-
*[Configure a public endpoint and network security group in SQL Managed Instance](search-howto-connecting-azure-sql-mi-to-azure-search-using-indexers.md) to allow connections from Azure Cognitive Search. If your Azure SQL Managed Instance is configured for private connections, [create a shared private link](search-indexer-howto-access-private.md#create-a-shared-private-link-for-a-sql-managed-instance) in Cognitive Search to allow the connection.
34
+
*[Configure a public endpoint and network security group in SQL Managed Instance](search-howto-connecting-azure-sql-mi-to-azure-search-using-indexers.md) to allow connections from Azure Cognitive Search. If your Azure SQL Managed Instance is configured for private connections, [create a shared private link](search-indexer-how-to-access-private-endpoint-sql-mi.md) in Cognitive Search to allow the connection.
Copy file name to clipboardExpand all lines: articles/search/search-indexer-how-to-access-private-endpoint-sql-mi.md
+11-8Lines changed: 11 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -18,11 +18,12 @@ On a private connection to a SQL Managed Instance, the fully qualified domain na
18
18
19
19
Although you can call the Management REST API directly, it's easier to use the Azure CLI `az rest` module to send Management REST API calls from a command line.
20
20
21
-
> [!NOTE] This article relies on Azure portal for obtaining properties and confirming steps. However, when creating the shared private link for SQL Managed Instance, be sure to use the REST API. Although the Networking tab lists `Microsoft.Sql/managedInstances` as an option, the portal doesn't currently support the extended URL format used by SQL Managed Instance.
21
+
> [!NOTE]
22
+
> This article relies on Azure portal for obtaining properties and confirming steps. However, when creating the shared private link for SQL Managed Instance, be sure to use the REST API. Although the Networking tab lists `Microsoft.Sql/managedInstances` as an option, the portal doesn't currently support the extended URL format used by SQL Managed Instance.
22
23
23
24
## Prerequisites
24
25
25
-
+[Azure CLI](/azure/install-azure-cli)
26
+
+[Azure CLI](/cli/azure/install-azure-cli)
26
27
27
28
+ Azure Cognitive Search, Basic tier or higher. If you're using [AI enrichment](cognitive-search-concept-intro.md) and skillsets, the tier must be Standard 2 (S2) or higher. See [Service limits](search-limits-quotas-capacity.md#shared-private-link-resource-limits) for details.
28
29
@@ -50,7 +51,7 @@ Retrieve the FQDN of the managed instance, including the DNS zone. The DNS zone
50
51
51
52
1. On the **Connection strings** tab, copy the ADO.NET connection string for a later step. It's needed for the data source connection when testing the private connection.
52
53
53
-
For more information about connection properties, see [Create an Azure SQL Managed Instance](/azure/azure-sql/managed-instance/instance-create-quickstart?view=azuresql#retrieve-connection-details-to-sql-managed-instance).
54
+
For more information about connection properties, see [Create an Azure SQL Managed Instance](/azure/azure-sql/managed-instance/instance-create-quickstart?view=azuresql#retrieve-connection-details-to-sql-managed-instance&preserve-view=true).
54
55
55
56
## 3 - Create the body of the request
56
57
@@ -94,11 +95,11 @@ For more information about connection properties, see [Create an Azure SQL Manag
94
95
az rest --method put --uri https://management.azure.com/subscriptions/{{search-service-subscription-ID}}/resourceGroups/{{search service-resource-group}}/providers/Microsoft.Search/searchServices/{{search-service-name}}/sharedPrivateLinkResources/{{shared-private-link-name}}?api-version=2021-04-01-preview --body @create-pe.json
95
96
```
96
97
97
-
Provide the subscription ID, resource group name, and service name of your Cognitive Search resource.
98
+
Provide the subscription ID, resource group name, and service name of your Cognitive Search resource.
98
99
99
-
Provide the same shared private link name that you specified in the JSON body.
100
+
Provide the same shared private link name that you specified in the JSON body.
100
101
101
-
Provide a path to the create-pe.json file if you've navigated away from the file location. You can type `dir` at the command line to confirm the file is in the current directory.
102
+
Provide a path to the create-pe.json file if you've navigated away from the file location. You can type `dir` at the command line to confirm the file is in the current directory.
102
103
103
104
1. Press Enter to run the command.
104
105
@@ -130,6 +131,8 @@ You can use the portal for this step, or any client that you would normally use
130
131
131
132
1.[Create the data source definition](search-howto-connecting-azure-sql-database-to-azure-search-using-indexers.md) as you would normally for Azure SQL. There are no properties in any of these definitions that vary when using a shared private endpoint.
132
133
134
+
Provide the connection string that you copied earlier.
135
+
133
136
```http
134
137
POST https://myservice.search.windows.net/datasources?api-version=2020-06-30
135
138
Content-Type: application/json
@@ -150,7 +153,7 @@ You can use the portal for this step, or any client that you would normally use
150
153
}
151
154
```
152
155
153
-
1. [Create the indexer definition](search-howto-create-indexers.md),
156
+
1. [Create the indexer definition](search-howto-create-indexers.md), setting the indexer execution environment to "private".
154
157
155
158
[Indexer execution](search-indexer-securing-resources.md#indexer-execution-environment) occurs in either a private environment that's specific to the search service, or a multi-tenant environment that's used internally to offload expensive skillset processing for multiple customers. **When connecting over a private endpoint, indexer execution must be private.**
156
159
@@ -220,6 +223,6 @@ Assuming that your search service isn't also configured for a private connection
220
223
221
224
+[Make outbound connections through a private endpoint](search-indexer-howto-access-private.md)
222
225
+[Indexer connections to Azure SQL Managed Instance through a public endpoint](search-howto-connecting-azure-sql-mi-to-azure-search-using-indexers.md)
223
-
+[Index data from Azure SQL](search-howto-connecting-azure-sql-database-to-azure-search-using-indexers)
226
+
+[Index data from Azure SQL](search-howto-connecting-azure-sql-database-to-azure-search-using-indexers.md)
Copy file name to clipboardExpand all lines: articles/search/search-indexer-howto-access-private.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -268,7 +268,7 @@ A `202 Accepted` response is returned on success. The process of creating an out
268
268
269
269
## 2 - Approve the private endpoint connection
270
270
271
-
The resource owner must approve the connection request you created. This section assumes the portal for this step, but you can also use the REST APIs of the Azure PaaS resource. [Private Endpoint Connections (Storage Resource Provider)](/rest/api/storagerp/privateendpointconnections) and [Private Endpoint Connections (Cosmos DB Resource Provider)](/rest/api/cosmos-db-resource-provider/2022-05-15/private-endpoint-connections) are two examples.
271
+
The resource owner must approve the connection request you created. This section assumes the portal for this step, but you can also use the REST APIs of the Azure PaaS resource. [Private Endpoint Connections (Storage Resource Provider)](/rest/api/storagerp/privateendpointconnections) and [Private Endpoint Connections (Cosmos DB Resource Provider)](/rest/api/cosmos-db-resource-provider/2022-11-15/private-endpoint-connections) are two examples.
272
272
273
273
1. In the Azure portal, open the **Networking** page of the Azure PaaS resource.
0 commit comments