Azure Data Share sync failure

Shivshankar Kanawade 0 Microsoft Employee

Hi I am doing a Datashare from one tenant to another I am doing a datashare from PME tenant to MSIT

I have set the datashare and have given the contributor access to the storage but still when it syncs in MSIT it fails because of this error

Failed to synchronize. Possible root causes:

(1). Appropriate permission is missing to Data Share managed identity.

(2). Azure services on the trusted services list are not allowed access by firewall settings.

After you make changes, it can take up to a few minutes for permission to be granted to Data Share. Please try again later.

I made sure that in MSIT tenant the Storage blob contributor permission are there for the Data share managed identity on the Storage

And in Firewall and Virtual networks setting on storage I have made sure the option to access is enabled public access from all networks

User's image

Any thoughts or guidance

phemanth 13,800 Reputation points Microsoft Vendor

2025-01-30T08:36:11.5766667+00:00

@Shivshankar Kanawade

Thanks for reaching out to Microsoft Q&A.

It seems like you've already taken some important steps to troubleshoot the issue for the sync failure:

Please consider additional suggestions and confirm us

Verify Managed Identity Permissions: Ensure that the Data Share managed identity has the necessary permissions. Double-check that the managed identity has the Contributor role assigned to the storage account in both the PME and MSIT tenants.

Firewall and Network Settings: Confirm that the firewall settings allow access to Azure services on the trusted services list. You mentioned enabling public access from all networks, but it's also important to ensure that the specific setting for trusted Azure services is enabled.

Role Assignments: Sometimes, role assignments can take a few minutes to propagate. If you've recently made changes, wait a bit and then try syncing again.

Resource Provider Registration: Ensure that the Azure Data Share service is registered as a resource provider in your Azure subscription. You can do this by navigating to the Subscriptions section in the Azure portal, selecting your subscription, and then registering the Microsoft.DataShare resource provider

Check for Additional Errors: Look for any additional error messages or logs that might provide more details about the failure. This can help pinpoint the exact cause of the issue.

Please consult the Azure Data Share troubleshooting guide for more detailed information

I hope the above steps will resolve the issue, please do let us know if issue persists. Thank you
phemanth 13,800 Reputation points Microsoft Vendor

2025-01-31T01:30:32.93+00:00

@Shivshankar Kanawade We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Shivshankar Kanawade 0 Reputation points Microsoft Employee

2025-01-31T15:54:10.2033333+00:00

@phemanth Thanks for the suggestions yes I did go through your steps and the contributor access is there for the data share managed identity to the storage. You mentioned "Confirm that the firewall settings allow access to Azure services on the trusted services list." where are this settings located to add to trusted services list is it on storage?
Shivshankar Kanawade 0 Reputation points Microsoft Employee

2025-01-31T15:54:43.3933333+00:00

@phemanth Thanks for the suggestions yes I did go through your steps and the contributor access is there for the data share managed identity to the storage. You mentioned "Confirm that the firewall settings allow access to Azure services on the trusted services list." where are this settings located to add to trusted services list is it on storage?
phemanth 13,800 Reputation points Microsoft Vendor

2025-02-03T12:15:17.4566667+00:00
@Shivshankar Kanawade Yes, the settings to allow access to Azure services on the trusted services list are located within the storage account's firewall and virtual network settings. Here's how you can find and configure these settings:

Sign in to the Azure portal and navigate to your storage account.

In the left navigation pane, under Security + networking, select Networking.

On the Firewalls and virtual networks tab, ensure that Selected networks is chosen.

Scroll down to the Exceptions section.

Make sure the checkbox for Allow Azure services on the trusted services list to access this storage account is selected.

Please check https://learn.microsoft.com/en-us/azure/search/search-indexer-howto-access-trusted-service-exception
Shivshankar Kanawade 0 Reputation points Microsoft Employee

2025-02-04T15:45:42.3133333+00:00

@phemanth I did try this but still it doesn't sync and gives the same error message any additional things I can try
phemanth 13,800 Reputation points Microsoft Vendor

2025-02-05T18:35:52.2+00:00
@Shivshankar Kanawade

Please confirm the below steps if issue persists, please do let me know

Check Network Security Group (NSG) Rules: Ensure that there are no NSG rules blocking the traffic between the PME and MSIT tenants. Sometimes, NSG rules can inadvertently block necessary traffic.

Verify Subscription and Resource Limits: Make sure that you haven't hit any subscription or resource limits that might be affecting the sync process. This includes checking the number of storage accounts, data shares, and other resources.

Review Diagnostic Logs: Enable and review diagnostic logs for both the storage account and the Azure Data Share service. These logs can provide more detailed information about what might be causing the sync failure.

Check for Service Health Issues: Sometimes, there might be ongoing service health issues with Azure that could be affecting your Data Share sync. You can check the Azure Service Health page for any known issues.

Update Azure Data Share and Storage Account: Ensure that both the Azure Data Share service and the storage account are up to date with the latest updates and patches. Sometimes, updates can resolve underlying issues. If issue persists, please do let me know

Share via

Azure Data Share sync failure

Your answer