Inbound Private Link for Power Platform Dataverse

Your requirement is inbound user access to the Dataverse environment, whereas the subnet-delegation documentation covers outbound calls made by plugins and connectors. Those are different traffic paths. Microsoft’s current VNet overview does not document an inbound Private Link endpoint for the environment URL, so that feature cannot be inferred from enabling VNet support. The documented inbound control is the Dataverse IP firewall in managed environments. It restricts permitted source IP ranges, subject to its licensing requirements, but does not turn the service into a private endpoint or satisfy an internet-free transport requirement. First separate access restriction from private routing in your design requirements. If source restrictions are acceptable, test IP firewall in audit-only mode before enforcement. If private inbound transport is mandatory, request written confirmation from Power Platform support for your cloud and region. I cannot confirm an announced delivery date for that capability.