Microsoft Fabric Blog announces the preview of workspace-level Private Link, a new security feature enabling more granular private network access to individual Fabric workspaces. This post by the Microsoft Fabric Blog team guides IT professionals through setup and highlights key security benefits.

Fabric workspace-level Private Link (Preview)

Microsoft Fabric has announced the preview release of workspace-level Private Link support, delivering increased network security and granular access control to organizations using Microsoft Fabric.

Overview

Following last year’s general availability of Private Link for Fabric Tenants, Microsoft responded to customer feedback by enabling Private Link at the workspace level. This allows organizations to protect individual Fabric workspaces with private endpoints, ensuring traffic stays within the virtual network and does not traverse the public internet.

Key scenarios:

  • Financial institutions needing strict data privacy
  • Healthcare providers securing sensitive patient data
  • Any enterprise segmenting network access across business units, environments, or domains

Azure Private Link enables private connectivity from Azure services to virtual networks. Now, Microsoft Fabric supports configuring these connections at the workspace scope.

Workspace-level Private Link

Key Benefits

  • Enhanced Enterprise Security: All traffic to the Fabric workspace remains within the organization’s Azure virtual network, minimizing exposure to the public internet.
  • Granular Access Controls: Organizations can control private network access per workspace instead of globally, making it ideal for enforcing differentiated security policies for dev/test/prod or separate business units.
  • Regulatory Compliance: Supports compliance efforts in regulated industries via network isolation.

Limitations

  • Fabric portal access to workspaces via workspace-level Private Link is not supported in this preview.
  • See current limitations.

Implementation Guide

To set up workspace-level Private Link for a Fabric workspace:

  1. Enable Inbound Network Rules:
  2. Configure Private Link and Endpoints:
    • As a workspace admin, use the Azure portal to:
      • Create an Azure Private Link service referencing the target Fabric workspace.
      • Set up private endpoints for this service within your virtual network.
      • Test connectivity via a VM in the same network to confirm private access.
      • Restrict inbound public access for the workspace.
  3. Further Details:
    • Step-by-step configuration is available here.

Looking Ahead

Microsoft plans to enhance and refine workspace-level Private Link based on user feedback and evolving cloud security needs. Organizations are encouraged to trial the feature and provide feedback to improve Microsoft Fabric’s security capabilities.

Learn More:

This announcement was published by the Microsoft Fabric Blog team.

This post appeared first on “Microsoft Fabric Blog”. Read the entire article here