Forum Discussion

techresa's avatar
techresa
Regular Visitor
6 months ago
Solved

Updating the On-Premises Data Gateway

There is a new preview feature that allows updating the on-premises data gateway from the UI. A user performed this update without notifying me (the admin) that he was going to do it. Thankfully, it ...
  • v-pnaroju-msft's avatar
    5 months ago

    Thank you, djurecic, GilbertQ and tayloramy for your responses.

    Hi techresa,

    We appreciate your inquiry on the Microsoft Fabric Community Forum.

    Based on our understanding, the behavior you observed is related to the new on-premises data gateway update experience, which is currently available as a preview feature. During this preview phase, role-based access control (RBAC) may not be fully enforced. While Microsoft documentation states that only Gateway Administrators should manage and update gateways, preview capabilities may temporarily allow broader roles such as Connection Creators to trigger updates.

    At present, there is no tenant level or gateway level setting to restrict the gateway update user interface exclusively to administrators. As a best practice, you should enforce the principle of least privilege by reviewing and limiting gateway roles. You should also use separate gateways for DEV, TEST, and PROD environments to reduce risk, and monitor gateway related activities using audit logs.

    Additionally, please refer to the links below:
    Update an on-premises data gateway | Microsoft Learn
    View and manage on-premises data gateways - Power Platform | Microsoft Learn
    Manage security roles | Microsoft Learn
    On-premises data gateway December 2025 release | Microsoft Fabric Blog | Microsoft Fabric

    We hope the information provided will help resolve the issue. Should you have any further queries, please feel free to contact the Microsoft Fabric community.

    Thank you.