Integrating with data source services on Microsoft Azure
Last updated: Jun 28, 2024
Integrating with data source services on Microsoft Azure
You can configure an integration with the Microsoft Azure platform to allow IBM watsonx users access to data sources from Microsoft Azure. Before proceeding, make sure you have required permissions. For example, you'll need permission in your
subscription to create an application integration in Azure Active Directory.
After you configure an integration, you'll see it under Service instances. You'll see a new Azure tab that lists your instances of Data Lake Storage Gen1 and SQL Database.
Navigate to the Subscriptions panel and copy your subscription ID.
In IBM watsonx, go to Administration > Cloud integrations and click the Azure tab. Paste the subscription ID you copied in the previous step into the Subscription ID field.
In Microsoft Azure Active Directory, navigate to Manage > App registrations and click New registration to register an application. Give it a name such as IBM integration and select the desired option
for supported account types.
Copy the Application (client) ID and the Tenant ID and paste them into the appropriate fields on the IBM watsonx Integrations page, as you did with the subscription ID.
In Microsoft Azure, navigate to Certificates & secrets > New client secret to create a new secret.
Important!
Write down your secret and store it in a safe place. After you leave this page, you won't be able to retrieve the secret again. You'd need to delete the secret and create a new one.
If you ever need to revoke the secret for some reason, you can simply delete it from this page.
Pay attention to the expiration date. When the secret expires, integration will stop working.
Copy the secret from Microsoft Azure and paste it into the appropriate field on the Integrations page as you did with the subscription ID and client ID.
Confirm that you can see your Azure services. From the main menu, choose Administration > Services > Services instances. Click the Azure tab to see those services.
Now users who have credentials to your Azure services can create connections to them by selecting them on the Add connection page. Then they can access data from those connections
by creating connected data assets.
Configuring firewall access
Copy link to section
You must also configure access so IBM watsonx can access data through the firewall.
For Microsoft Azure SQL Database firewall:
Open the database instance in Microsoft Azure.
From the top list of actions, select Set server firewall.
Set Deny public network access to No.
In a separate tab or window, open IBM watsonx and go to Administration > Cloud integrations. In the Firewall configuration panel, for each firewall IP range, copy the start and end address values into the
list of rules in the Microsoft Azure QL Database firewall.
For Microsoft Azure Data Lake Storage Gen1 firewall:
Open the Data Lake instance.
Go to Settings > Firewall and virtual networks.
In a separate tab or window, open IBM watsonx and go to Administration > Cloud integrations. In the Firewall configuration panel, for each firewall IP range, copy the start and end address values into the
list of rules under Firewall in the Data Lake instance.
You can now create connections, preview data from Microsoft Azure data sources, and access Microsoft Azure data in Notebooks, Data Refinery, SPSS Modeler, and other tools in projects and in catalogs. You can see your Microsoft Azure instances
under Services > Service instances.
About cookies on this siteOur websites require some cookies to function properly (required). In addition, other cookies may be used with your consent to analyze site usage, improve the user experience and for advertising.For more information, please review your cookie preferences options. By visiting our website, you agree to our processing of information as described in IBM’sprivacy statement. To provide a smooth navigation, your cookie preferences will be shared across the IBM web domains listed here.