MC1070180 – (Updated) Microsoft Fabric: Workspace inbound/outbound access protection will be available by default (preview) (archived)

Product:

Fabric, Microsoft 365 admin center, Power BI

Platform:

Online, World tenant

Status:

Change type:

Admin impact, New feature, Updated message, User impact

Links:

Details:

Summary:
Microsoft Fabric will preview Workspace-level private links and Outbound access protection starting late August 2025. Tenant admins can enable these features for workspace admins to secure inbound and outbound network access, reducing unauthorized access and data exfiltration risks. Review and adjust settings post-release.

Details:
Updated August 5, 2025: We have updated the timeline below. Thank you for your patience.
Microsoft Fabric will introduce two Preview features called Workspace-level private links and Outbound access protection at the Fabric workspace level. At the tenant level, the corresponding settings Configure workspace level inbound network rules and Configure workspace level outbound network rules will be in the Advanced networking section of the Fabric admin portal.The new tenant-level settings will be disabled by default. You (the tenant admin) can switch ON the tenant toggle in the Fabric admin center if you decide to make this feature available to your workspace admins. This will allow the workspace admins to configure Workspace-level private links and Outbound access protection. The workspace admin will then decide whether to configure these features at the workspace level.
[When this will happen:]
Public Preview (Worldwide): We will begin rolling out in late August 2025 (previously late July).
We will communicate the plan for General Availability in a future post.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:

Created:
2025-05-09

updated:
2025-08-06

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

Pictures

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Workspace-level private links
Without proper preparation, enabling private links may lead to unintentional blocking of legitimate inbound access, disrupting user workflows and access to necessary data.
   - roles: Tenant Admin, Workspace Admin
   - references: https://learn.microsoft.com/fabric/security/

Outbound access protection
If outbound access protection is enabled without prior configuration, it may prevent users from accessing external resources, leading to disruptions in data processing and analytics tasks.
   - roles: Workspace Admin, Data Analyst
   - references: https://learn.microsoft.com/fabric/security/

Network security settings
Failure to review and adjust new network security settings may result in unauthorized access or data exfiltration risks, impacting overall data security and compliance.
   - roles: Tenant Admin, Compliance Officer
   - references: https://learn.microsoft.com/fabric/security/

Configutation Options**

XXXXXXX ... paid membership only

Opportunities**

Enhanced Data Security and Compliance
Implementing Workspace-level private links and Outbound access protection can significantly enhance data security by preventing unauthorized access and data exfiltration. This is particularly beneficial for organizations that handle sensitive information, ensuring compliance with data protection regulations.
   - next-steps: Conduct a risk assessment to identify sensitive data locations, then enable and configure the new security features in the Fabric admin portal. Provide training for workspace admins on how to manage these settings effectively.
   - roles: Chief Information Security Officer (CISO), Data Protection Officer (DPO), IT Security Manager
   - references: https://learn.microsoft.com/fabric/security/

Improved User Experience through Controlled Access
By blocking public access and allowing only managed private endpoints, workspace admins can create a more controlled environment for users. This reduces the likelihood of disruptions caused by unauthorized access attempts, leading to a smoother user experience.
   - next-steps: Develop guidelines for workspace admins on configuring access controls and educate users on the benefits of these restrictions. Monitor user feedback to assess the impact on their workflows.
   - roles: Workspace Admins, IT Support Staff, End Users
   - references: https://learn.microsoft.com/fabric/security/

Streamlined IT Operations
The new features will enable IT departments to enforce stricter network security policies with less manual oversight. By automating outbound access protection, IT can focus on other critical tasks while ensuring data security is maintained.
   - next-steps: Integrate the new security settings into existing IT governance frameworks and automate compliance checks. Regularly review and update policies based on evolving security needs.
   - roles: IT Operations Manager, Compliance Officer, Network Administrator
   - references: https://learn.microsoft.com/fabric/security/

Potentional Risks**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only