Power Platform – Upcoming enforcement of tenant isolation [MC1221422]

Message ID: MC1221422
As part of our Secure Future Initiative (SFI), the tenant isolation feature will be enabled by default for all Power Platform tenants as the new default behavior. The enforcement is scheduled to begin on February 1, 2026.

This feature applies only to Power Platform policies and is separate from guest access policies and Azure tenant restriction features.

How does this affect me?
Tenant isolation only applies to connectors running within a tenant. The default tenant isolation behavior will block all connection attempts from one tenant to another; inbound (connections to the tenant from external tenants), outbound (connections from the tenant to external tenants), or both (inbound – outbound) will be blocked by Power Platform.

Communications within the same tenant will not be affected. In addition, users who sign in as guests (guest user access) will remain unaffected.

What do I need to do to prepare?
If you want to allow cross-tenant connections in Power Platform prior to the enforcement date, you can set up tenant isolation and explicitly allow individual tenants. Alternatively, you can disable tenant isolation entirely.

If either of these actions are performed prior to February 1, 2026, your configuration will not be changed as part of the enforcement. If no action is taken, all cross-tenant connections will be blocked by default starting on February 1, 2026.

For more information and to learn how to configure a tenant isolation policy, please review the Cross-tenant inbound and outbound restrictions documentation.

Source: Microsoft

Latest Posts