Updating the On-Premises Data Gateway

Thank you, djurecic, GilbertQ and tayloramy for your responses.

Hi techresa,

We appreciate your inquiry on the Microsoft Fabric Community Forum.

Based on our understanding, the behavior you observed is related to the new on-premises data gateway update experience, which is currently available as a preview feature. During this preview phase, role-based access control (RBAC) may not be fully enforced. While Microsoft documentation states that only Gateway Administrators should manage and update gateways, preview capabilities may temporarily allow broader roles such as Connection Creators to trigger updates.

At present, there is no tenant level or gateway level setting to restrict the gateway update user interface exclusively to administrators. As a best practice, you should enforce the principle of least privilege by reviewing and limiting gateway roles. You should also use separate gateways for DEV, TEST, and PROD environments to reduce risk, and monitor gateway related activities using audit logs.

Additionally, please refer to the links below:
Update an on-premises data gateway | Microsoft Learn
View and manage on-premises data gateways - Power Platform | Microsoft Learn
Manage security roles | Microsoft Learn
On-premises data gateway December 2025 release | Microsoft Fabric Blog | Microsoft Fabric

We hope the information provided will help resolve the issue. Should you have any further queries, please feel free to contact the Microsoft Fabric community.

Thank you.