Jun 17 2020 05:08 AM
Jun 17 2020 05:08 AM
I am wondering how to best secure Power Automate to prevent data leaks. I can see that there is the connector config where you can divide them into two separate groups that cannot talk to each other. It might therefore seem sensible to put the MS ones into one group and the others into the other.
However even if the MS service connectors are all in a group together, they don't specify which Azure or Office 365 tenant you can connect to. This still feels like a bit of a risk since users could hook up a flow to a personal tenant...
When you look at Teams apps they suffer form the same issue, e.g. the Forms app allows me to connect to any Forms account not just the current one I am in.
I know that some things like tenant restriction feature at the proxy can stop you from accessing those other tenants when on company network. Also Conditional Access can do things like make sure you can only access these services from certain trusted locations etc but as people start to use mobile devices and so on, I cannot trust them aways being on the company network.
I want to allow use of Power Automate within our Office 365 tenant but only connect to other services in that tenant. Is this even possible?