Managing network access for managed disks

Question

Hi,

What happens if I set a VM's managed disk network settings to 'Disable public and private access' when it's in a VNet that's only accessible through a private IP address? Will the VM break, or are there any features that won't be available with the disk like backup&restore / re-size / move data inside vm? I'm trying to figure out what is the real difference between Disable public and private access and Disable public access and enable private access

Answer 1

Hi,

If you select Disable public and private access option the VM will still work fine, as well as backup/restore, etc., will all still work as normal.

The network access options relate to exporting/importing managed disks.

• Enable public access from all networks = importing/exporting can occur regardless of if the remote network is public or private
• Disable public access and enable private access = importing/exporting needs to occur via private link (disk access resource)
• Disable public and private access = importing/exporting isn't allowed

NOTE: A Secure Access Signature (SAS) needs to be generated before an import/export is allowed, regardless of the network being public or private.

Please click Accept Answer and upvote if the above was helpful.

Thanks.

-TP