Skip to content

Portal Walkthrough: Control 1.20 - Network Isolation and Private Connectivity

Last Updated: January 2026 Portal: Power Platform Admin Center, Azure Portal Estimated Time: 6-8 hours for VNet setup

Prerequisites

  • Power Platform Admin role
  • Azure Network Contributor role
  • Managed Environment enabled
  • Azure subscription for VNet resources

Step-by-Step Configuration

Step 1: Configure IP Firewall

  1. Open Power Platform Admin Center
  2. Select environment > Settings > Security
  3. Enable IP firewall
  4. Add approved IP ranges:
  5. Corporate network CIDR (e.g., 10.0.0.0/8)
  6. VPN egress IPs
  7. Set mode: Audit first, then Enforce

Step 2: Enable VNet Support (Zone 3)

  1. In Azure Portal, create VNet:
  2. Name: vnet-powerplatform-prod
  3. Address space: 10.100.0.0/16
  4. Create delegated subnet:
  5. Name: snet-powerplatform
  6. Delegation: Microsoft.PowerPlatform/enterprisePolicies
  7. In PPAC, enable VNet support for environment
  8. Select the delegated subnet

Step 3: Configure Private Endpoints for Key Vault

  1. In Azure Portal, navigate to Key Vault
  2. Go to Networking > Private endpoint connections
  3. Add private endpoint:
  4. VNet: powerplatform VNet
  5. Subnet: Private endpoint subnet
  6. Create private DNS zone and link to VNet
  1. Create Azure Monitor Private Link Scope (AMPLS)
  2. Add Application Insights resources
  3. Create private endpoint for AMPLS
  4. Configure private DNS zones

Configuration by Governance Level

Setting Baseline (Zone 1) Recommended (Zone 2) Regulated (Zone 3)
IP Firewall Optional Required Required
VNet Support Not required Recommended Mandatory
Private Endpoints Not required Sensitive data All connections
Network Logging Basic Standard Full flow logging

Validation

After completing these steps, verify:

  • IP Firewall blocks non-allowlisted IPs
  • Agent reaches resources via VNet path
  • Private DNS resolves to private IPs
  • Key Vault access uses private endpoint

Back to Control 1.20 | PowerShell Setup | Verification Testing | Troubleshooting