Managed private endpoint -The approval state may be stale by a minute

Question

Hi

created Managed private end point in Azure data factory using RestAPI and approved.

But it is showing The approval state may be stale by a minute.
This is happening with multiple MPEs and did not approve after many hours as well.

Fyi - Few MPEs got approved. But many were stale :(

Answer 1

Hi ,

Thanks for reaching out to Microsoft Q&A.

It can occur due to a variety of reasons, such as latency in azure's resource approval process, issues with the underlying networking setup, or inconsistencies with API requests.

Verify the approval status using azure portal

• Navigate to the Azure Portal.
• Open the Data Factory resource.
• Go to Manage > Managed Private Endpoints.
• Check the status of the problematic endpoints. If they show as pending, reattempt the manual approval process.

Check the Network Configuration

• Ensure that the private link service associated with the managed private endpoint is healthy and correctly configured.
• Validate DNS resolution for the private endpoint. If DNS is misconfigured, it might cause approval delays.

If the approval is stale via the portal, you can manually reattempt the approval using REST API:

List

GET https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.DataFactory/factories/{dataFactoryName}/managedVirtualNetworks/default/managedPrivateEndpoints?api-version=2018-06-01

Approve

PATCH https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.DataFactory/factories/{dataFactoryName}/managedVirtualNetworks/default/managedPrivateEndpoints/{privateEndpointName}?api-version=2018-06-01

Investigate Logs:

Check the activity logs and diagnostic logs of the Azure Data Factory and associated private link service in the Azure Portal:

• Go to Monitor > Activity Log.
• Look for any warnings, errors, or failed approval events.
• Enable diagnostic settings for ADF to capture detailed logs if not already enabled.

Check Azure Resource Dependencies:

Managed Private Endpoints depend on several resources. Check the following:

• Private Link Service: Ensure that the private link service is reachable.
• Resource Locking: Verify no locks are applied to either the ADF resource or the resource you are connecting to.

Common Fix: Delete and Recreate the MPE

If approval is consistently failing or remaining stale:

1. Delete the stale MPE.
2. Recreate the MPE via the portal or REST API.
3. Approve it immediately after creation.

Please feel free to click the 'Upvote' (Thumbs-up) button and 'Accept as Answer'. This helps the community by allowing others with similar queries to easily find the solution.