Azure SQL Firewall and PowerApps

[pz1337]

Hi everyone,

I set up a PaaS SQL database in Azure following security best practices, however when I am trying to give access to my manager, who is using powerapps to connect to that databsase, I have issues with the database server firewall.

The firewall works based on whitelisting IP ranges, however the problem with Powerapps is that my manager is getting a new IP address every time he is trying to connect.

I don't want to work around this by allowing 0.0.0.0-255.255.255.255, then the firewall wouldn't make sense at all. So the only thing I can think of is adding the IP range of PowerApps.

Is there any way to determine what the IP range is? Or is there any other recommendation how to get this sorted out?

Thanks!

Petr

[CarlosFigueira · Accepted solution]

You can find the list of IP addresses used by PowerApps at https://docs.microsoft.com/en-us/powerapps/maker/canvas-apps/limits-and-config#ip-addresses. It will depend on which region your app / environment is located.

Hope this helps!

[pz1337]

That is exactly what I was looking for.

Thanks!

Do you also know if it's possible to add connection to Azure SQL database in PowerApps using AAD login? I have tried different formats of the username, however none of that worked.

PowerApps -> Data -> Connections -> Create a connection -> SQL Server

I am able to login to the databse with AAD accounts using SSMS and PowerBI (Desktop App) just fine.

[CarlosFigueira]

---

@pz1337 wrote:

Do you also know if it's possible to add connection to Azure SQL database in PowerApps using AAD login? I have tried different formats of the username, however none of that worked. 

Not yet, but this funcionality should be coming in the next few months (not sure exactly when, though).

[Anonymous]

I'm also looking to use AAD to restrict access to the database to company employees.
My concern currently is that if someone got hold of the username and password we're using for the connection, they could make their own connection on a different tenant and access our data. Is that possible?
Also, is the implementation of this feature listed somewhere so we can see the current status of it?

[Anonymous]

I'm also looking to use AAD to restrict access to the database to company employees using PowerApps.
My concern currently is that if someone got hold of the username and password we're using for the connection, they could make their own connection on a different tenant and access our data.
Also, is the implementation of this feature listed somewhere so we can see the current status of it?