We’re thrilled to announce that workspace-level Private Link support in Microsoft Fabric is now in Preview!
In May 2024, we announced General Availability of Private Link for Fabric Tenants. Since then, we've heard feedback requesting more granular network security controls.
Private link for Fabric workspaces empowers your organization to secure your Fabric workspaces with fine-grained network isolation, allowing private, secure access from your virtual network — without traversing the public internet. From financial institutions requiring stringent data privacy measures to healthcare providers safeguarding patient information, private endpoints can provide the security and privacy needed to comply with industry regulations while maintaining trust.
What is workspace-level Private Link
Azure Private Link is a feature designed to enhance security by enabling private connectivity between Azure services and virtual networks. With this new capability, you can now configure Azure Private Link connections at the workspace level in Microsoft Fabric.
Key benefits
- Enhanced enterprise-grade security
By leveraging private endpoints, organizations can mitigate the risks associated with exposing their Fabric workspaces to the public internet. This setup ensures that network or data traffic remains within the secure confines of the organization’s virtual network, reducing the potential for malicious attacks.
- Granular control
The feature makes it possible to control private network access per workspace instead of at the tenant level. This allows you to apply differentiated controls across business units, dev/test/prod environments, data domains, or projects.
To learn more about Private links for Fabric workspaces (preview), refer to the documentation.
Fabric portal access to workspaces via workspace-level private link is not supported in this release. You can find more information about what is supported and other limitations Supported scenarios and limitations for workspace-level private links (preview) documentation.
Implementing Fabric workspace-level Private Link
Implementing Fabric workspace-level private link involves several steps, including the creation of private endpoints within your virtual network.
Steps to configure
- As a Fabric tenant admin, enable the Configure workspace-level inbound network rules tenant setting in the Fabric admin portal.
- As a Fabric workspace admin
- Navigate to the Azure portal and create a Private Link service which refers to the Fabric workspace.
- Configure private endpoints for the Private Link service you created for the Fabric workspace.
- Test the connectivity from a virtual machine in the same virtual network as the private endpoint to confirm successful connectivity.
- Restrict inbound public access for the workspace.
For detailed instructions, refer to the Set up and use workspace-level private links (preview) documentation.
Looking ahead
Workspace-level private link for Fabric workspaces is a significant step towards a more secure and private cloud computing environment. We will continue to further enhance and refine this feature based on your feedback and evolving security needs.
Give these features a try and let us know how we can improve the experience and make Fabric even more secure!