Forum Discussion
Updating the On-Premises Data Gateway
Thank you, djurecic, GilbertQ and tayloramy for your responses.
Hi techresa,
We appreciate your inquiry on the Microsoft Fabric Community Forum.
Based on our understanding, the behavior you observed is related to the new on-premises data gateway update experience, which is currently available as a preview feature. During this preview phase, role-based access control (RBAC) may not be fully enforced. While Microsoft documentation states that only Gateway Administrators should manage and update gateways, preview capabilities may temporarily allow broader roles such as Connection Creators to trigger updates.
At present, there is no tenant level or gateway level setting to restrict the gateway update user interface exclusively to administrators. As a best practice, you should enforce the principle of least privilege by reviewing and limiting gateway roles. You should also use separate gateways for DEV, TEST, and PROD environments to reduce risk, and monitor gateway related activities using audit logs.
Additionally, please refer to the links below:
Update an on-premises data gateway | Microsoft Learn
View and manage on-premises data gateways - Power Platform | Microsoft Learn
Manage security roles | Microsoft Learn
On-premises data gateway December 2025 release | Microsoft Fabric Blog | Microsoft FabricWe hope the information provided will help resolve the issue. Should you have any further queries, please feel free to contact the Microsoft Fabric community.
Thank you.
Super UserHi techresa
Unfortunately what sometimes happens with these newer products is that the permissioning is a bit too high, meaning the user with the creator access can then update it through the UI. My recommended path would be is to do some training and understanding of what the implications are for doing an unscheduled gateway update and hopefully then in future the user will then understand this and come to you before simply updating the gateway.
Thank you for the reply. I understand that user training is important. I can lead a horse to drink (or not drink), but... I am keeping my fingers crossed that Microsoft will resolve the issue before the feature goes GA.