Azure search service to sharepoint not connecting using private endpoints

pv-scrosby 0 Reputation points
2025-11-18T15:39:15.6333333+00:00

We have an Azure search service setup all Azure components are using private endpoints, I have validated that all pieces of the ai chatbot are resolving using the PEs. Everything works ok until the backend AI Search service has the public IP disabled and the PE enabled. I did not build this, but have been asked to see if I can figure out what the issue is with the private endpoint.

When the public network is enabled it can reach the source material which is sharepoint, also in the cloud, not on prem. As soon as the public network is disabled the sharepoint site is no longer able to talk to the backend search service.

From the kudu console of the backend webapp service , sharepoint resolves as well.

I do not know much about the sharepoint side, nor am i a sharepoint admin, the search service has one entry under Indexes nothing under Indexers, which I assume is pointing at SP.

Thanks in advance

Azure AI Search
Azure AI Search
An Azure search service with built-in artificial intelligence capabilities that enrich information to help identify and explore relevant content at scale.
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. RAMAMURTHY MAKARAPU 1,125 Reputation points Microsoft External Staff Moderator
    2025-12-06T02:25:43.66+00:00

    Hi @pv-scrosby ,

    Thank you for submitting your question on Microsoft Q&A.

    Hey there! It looks like you're running into some connectivity issues between your Azure Search Service and SharePoint when using private endpoints. When your Azure Search Service is set to "public network enabled," everything works fine, but switching it to "public network disabled" interrupts the connection to SharePoint. Here are a few steps you can take and considerations to keep in mind:

    Troubleshooting Steps

    1. Verify Private Endpoint Configuration: Ensure the private endpoint for your Azure Search Service is configured correctly. Here’s a quick way to check:
      • Go to the Azure Portal > Azure Search Service > Networking > Private Endpoint Connections.
      • Confirm the private endpoint status is set to "Approved".
    2. Check Virtual Network Settings: Both the Azure Search Service and SharePoint should be on the same Virtual Network (VNet). You can verify this by checking both services' VNet settings.
    3. NSG and Firewall Rules: Make sure that your Network Security Group (NSG) and any firewall rules allow traffic:
      • Check the NSG rules on your private endpoint to allow inbound/outbound traffic on port 443 (HTTPS).
      • Ensure that traffic is allowed between your Azure Search Service and SharePoint.
    4. Access via Private Endpoint: When you’re accessing the Azure Search Service through a private endpoint, certain portal functionalities might be limited. You can’t access indexes or indexers directly via the portal if the service is private. Instead, you might want to use REST API tools like Postman or Azure CLI to manage your Azure Search Service.
    5. Use Diagnostic Tools: Utilize the Azure Network Watcher to run troubleshooting tools to check connectivity. This tool can help identify where the connection might be failing.
    6. Test with a Virtual Machine: Set up a virtual machine within the same VNet as the Azure Search Service, then try connecting to the search service from there to rule any local network issues.

    Follow-Up Questions

    To better assist you, I would recommend gathering some additional information:

    • Can you confirm if the Azure Search Service and SharePoint are indeed on the same Virtual Network?
    • What specific errors or behaviors are observed in SharePoint when trying to connect to the Azure Search Service?
    • Have you checked the logs in both Azure Search and SharePoint for any indication of the connection attempt status?
    • Can you verify that all necessary NSG rules and firewall settings are appropriately configured to allow traffic for your setups?

    Reference Documentationhttps://learn.microsoft.com/en-us/azure/search/service-create-private-endpoint

    https://learn.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview
    https://learn.microsoft.com/en-us/azure/search/search-indexer-howto-access-private?tabs=portal-create

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.