Connect to Azure SQL database with Point to Site Connection and Private Link

Hallo,

I'd like to try to get the following done only somehow it doesn't seem to work
I have configured a Logical Server within Azure with VNet and Private Link enabled

Within this subscription I've a VM configured which you only get connected to when you have P2S connection enabled

Client makes Point to Site VPN to Azure with AAD Authentication.

When you connect with RDP to this VM with a private IP it is working fine. Connecting from this VM with SSMS to the Logical Server is working fine. Also the connection server.privatelink.databases.windows.net is working.

When customers opens SSMS on his own laptop from home, he cannot make the connection to this Private Endpoint link.

The only way to solve this issue is to allow allow Public Network Access

And to add the home ip-adress of the customer, but this is something we don't want, because then I've to add for everyone his home IP

Is there another way to achieve the situation below. Did I missed something in the documentation.

My End Goal what I want to achieve is. Connect to my sql server through a P2S without adding home ip-address from customers.

I've been reading the following link https://docs.microsoft.com/en-us/azure/sql-database/sql-database-connectivity-architecture#connection-policy but then still my situation is not working.

Who can help me out. Thank in advance