Forum Discussion
Inbound Private Link for Power Platform Dataverse
Is there an inbound Azure Private Link / private endpoint for Power Platform Dataverse (i.e., for users accessing the environment URL from a private network)?.
As current Microsoft documentation only describes Virtual Network support (subnet delegation) for outbound connectivity from Power Platform. Our requirement is to avoid the public internet for user access to Power Platform. Is private inbound connectivity supported or on the roadmap?
Some documents I have referred to:
https://learn.microsoft.com/en-us/power-platform/admin/virtual-network-support-whitepaper
https://learn.microsoft.com/en-us/power-platform/admin/vnet-support-overview
1 Reply
Your requirement is inbound user access to the Dataverse environment, whereas the subnet-delegation documentation covers outbound calls made by plugins and connectors. Those are different traffic paths. Microsoft’s current VNet overview does not document an inbound Private Link endpoint for the environment URL, so that feature cannot be inferred from enabling VNet support. The documented inbound control is the Dataverse IP firewall in managed environments. It restricts permitted source IP ranges, subject to its licensing requirements, but does not turn the service into a private endpoint or satisfy an internet-free transport requirement. First separate access restriction from private routing in your design requirements. If source restrictions are acceptable, test IP firewall in audit-only mode before enforcement. If private inbound transport is mandatory, request written confirmation from Power Platform support for your cloud and region. I cannot confirm an announced delivery date for that capability.
