Firewall exceptions for client IP
- Last UpdatedAug 25, 2025
- 3 minute read
You can access the Datastore from the SQL Server Management Studio or any third-party tools from a client machine. However, the IP addresses of these client machines must be allowlisted to access the Datastore successfully. When you allowlist IP addresses, these addresses are considered as trusted addresses. You can define a single IP address or a range of IP addresses.
Allowlist a client IP address
Important: To allowlist reporting databases, ensure that the Reporting Analytics User role is assigned for the reporting database. To learn how to assign the Reporting Analytics User role, refer to Assign group and roles.
-
From the BI Gateway Model Builder Home Page, click
in the upper right corner.
A list with options appears. The current account is displayed.

-
Click Firewall exceptions for Client IP.
The Firewall Rules dialog box appears.

-
Click +.
-
In the Firewall Rule Name box, type the name for the rule.
-
In the Start IP box, type the start IP address.
-
In the End IP box, type the end IP address range. This is the IP address at which the allowlisting ends.
Note:
- If you want to allowlist only one IP address, then enter the same IP address in the Start IP and End IP boxes. However, if you want to allowlist a range of IP addresses, enter the start IP address and end IP address range in the Start IP and End IP boxes.
- We recommend that you do not allowlist the entire range of IP addresses from 0.0.0.0 to 255.255.255.255 to avoid any security risks. -
Click Save.
The selected IP addresses are allowlisted.
Edit an IP address
-
From the BI Gateway Model Builder Home Page, click
in the upper right corner.
A list with options appears.
-
Click Firewall exceptions for Client IP.
The Firewall Rules dialog box appears with a list of the defined rules.
-
From the list of rules, edit the start and end IP addresses in the Start IP and End IP boxes, respectively, for the required rule.
-
Click Save.
The selected IP addresses are allowlisted.
Delete an IP address
-
From the BI Gateway Model Builder Home Page, click
in the upper right corner.
A list with options appears.
-
Click Firewall exceptions for Client IP.
The Firewall Rules dialog box appears with a list of the defined rules.
-
Click the
icon in the row of the rule that you want to delete.
The selected rule is deleted.