Forum Discussion

techresa's avatar
techresa
Regular Visitor
6 months ago
Solved

Updating the On-Premises Data Gateway

There is a new preview feature that allows updating the on-premises data gateway from the UI. A user performed this update without notifying me (the admin) that he was going to do it. Thankfully, it ...
Need Help
  • v-pnaroju-msft's avatar
    v-pnaroju-msft
    6 months ago

    Thank you, djurecic, GilbertQ and tayloramy for your responses.

    Hi techresa,

    We appreciate your inquiry on the Microsoft Fabric Community Forum.

    Based on our understanding, the behavior you observed is related to the new on-premises data gateway update experience, which is currently available as a preview feature. During this preview phase, role-based access control (RBAC) may not be fully enforced. While Microsoft documentation states that only Gateway Administrators should manage and update gateways, preview capabilities may temporarily allow broader roles such as Connection Creators to trigger updates.

    At present, there is no tenant level or gateway level setting to restrict the gateway update user interface exclusively to administrators. As a best practice, you should enforce the principle of least privilege by reviewing and limiting gateway roles. You should also use separate gateways for DEV, TEST, and PROD environments to reduce risk, and monitor gateway related activities using audit logs.

    Additionally, please refer to the links below:
    Update an on-premises data gateway | Microsoft Learn
    View and manage on-premises data gateways - Power Platform | Microsoft Learn
    Manage security roles | Microsoft Learn
    On-premises data gateway December 2025 release | Microsoft Fabric Blog | Microsoft Fabric

    We hope the information provided will help resolve the issue. Should you have any further queries, please feel free to contact the Microsoft Fabric community.

    Thank you.

v-pnaroju-msft's avatar
v-pnaroju-msft
Icon for Community Support rankCommunity Support
6 months ago

Hi techresa,

Based on our understanding, disabling the OnPremises Data Gateway Updater Service might not be a recommended approach as a control mechanism to restrict updates. Although it may technically prevent both UI triggered and automatic updates, it could leave the gateway in an unsupported or unhealthy state. This may hinder the application of critical security patches and could result in compatibility or refresh issues.


Thank you.

  • techresa's avatar
    techresa
    Regular Visitor
    6 months ago

    Thanks for weighing in. I'm going to test it today in a Dev environment that isn't being used yet. I'll report back with my findings. (I might not get far since the data gateway is already running the March update.)