At this time, database export functionality requires that the target storage account is not restricted by network security rules. In other words, storage accounts used for BC DB exports cannot be locked down via firewall or network isolation settings. We would like for MS to create a workflow process to allow the BC DB export to be able to work with Network Security Restriction rules per client tenant.