Configure a Private Network
If Azure policies require storage accounts to use private networks, then follow these steps to configure a virtual network for function app and storage account communication. If additional functional apps are deployed, then use the same virtual network to configure the new function apps and configure the same in the storage account.
In the Search bar, enter "virtual networks".
Configure a virtual network in the same resource group as the function app, define an address space, and save. If you have already configured a virtual network, do not perform this step.
Go to function app, select Networking, and select Configure outbound network access.
Configure the function app to use the virtual network that you configured in Step 2 and save.
Navigate to the storage account that is linked to the function app.
Select Networking and then select Enabled from selected virtual networks and IP addresses.
Select the virtual network that you configured in Step 2 and save it. This ensures that the function app can talk to the storage account.
Select Add your client IP address so that accessing the storage browser from portal.azure.com does not cause permissions errors. This can be helpful to monitor the state of queues.