Egress Allowlist

Outbound hosts the on-premises server may need to reach.

NetworkingFirewall

Rapid BI Catalog runs on-premises and needs only a few outbound connections. Allow these hosts according to the features you use.

Outbound Hosts

Host / endpointPurposeWhen needed
app.rapidlens.comLicence activation, renewal, and release; signed release downloadsActivation, updates, recovery (online installs)
cloudmanager.tableau.comTableau Cloud Manager API — tenant, site, and user discoveryTableau Cloud environments only
Tableau Server / Cloud pod URL(s) (HTTPS)REST API: sign-in, list projects/workbooks, download workbooksAny Tableau processing
login.microsoftonline.comMicrosoft identity platform — acquires the access tokens for the Power BI service principalAny Power BI processing
api.powerbi.comPower BI REST API: list workspaces, members and reports, and download the report fileAny Power BI processing
api.fabric.microsoft.comMicrosoft Fabric API: the semantic model and report definitions — the metadata Rapid BI Catalog documentsAny Power BI processing
graph.microsoft.comMicrosoft Graph: expands an Entra ID security group into its users during Power BI discoveryPower BI workspaces shared with a security group
IdP issuer / authorization server (e.g. your Okta org)OIDC/SAML login and OAuth 2.0 Trust token issuanceSSO and/or OAuth 2.0 Trust
SMTP server (yours)Invitations, onboarding, password resets, notificationsfor email related features

Next Steps