Outbound access protection for Operations Agent — Microsoft Fabric Roadmap

Description

We are delivering Outbound Access Protection for Operations Agent in Microsoft Fabric, enabling administrators to enforce workspace-level security controls on all outbound actions performed by AI-driven automation.With this capability, you canEnsure all outbound actions such as triggering Power Automate flows, executing Fabric jobs, or sending Teams notifications are governed by administrator-defined connection rules.Block outbound connections by default when OAP is enabled, permitting traffic only through approved endpoints to prevent unauthorized data movement.Leverage a hybrid enforcement model that applies direct checks for external services like Teams while using Activator-managed enforcement for workflow and job execution across workspaces.Outbound Access Protection is available in Public Preview for all Fabric customers using Operations Agent. Configure access rules from the workspace security settings.Tentative GA Scope: Activator OAP toggle for OAOntology OAP toggle for OAPower Automate OAP toggle for OA

📰 Related Blog Article

Outbound access protection for Data Factory (Generally Available)

🔗 blog.fabric.microsoft.com

Change History

2026-07-29

Feature Description We are delivering Outbound Access Protection for Operations Agent in Microsoft Fabric enabling administrators to enforce workspace-level security controls on all outbound actions performed by AI-driven automation.With this capability you can:- Ensure all outbound actions--such as triggering Power Automate flows executing Fabric jobs or sending Teams notifications--are governed by administrator-defined connection rules.- Block outbound connections by default when OAP is enabled permitting traffic only through approved endpoints to prevent unauthorized data movement.- Leverage a hybrid enforcement model that applies direct checks for external services like Teams while using Activator-managed enforcement for workflow and job execution across workspaces.Outbound Access Protection is available in Public Preview for all Fabric customers using Operations Agent. Configure access rules from the workspace security settings.------ GA ADO Link:Link to GA Scope: https://dev.azure.com/powerbi/Trident/_workitems/edit/2208353Tentative GA Scope: * Activator OAP toggle for OA * Ontology OAP toggle for OA * Power Automate OAP toggle for OA OAP Fundamentals for GA guidance : https://dev.azure.com/powerbi/RTI%20UX/_workitems/edit/1671486 Fundamentals: https://dev.azure.com/powerbi/RTI%20UX/_workitems/edit/1671486 -> We are delivering Outbound Access Protection for Operations Agent in Microsoft Fabric enabling administrators to enforce workspace-level security controls on all outbound actions performed by AI-driven automation.With this capability you canEnsure all outbound actions such as triggering Power Automate flows executing Fabric jobs or sending Teams notifications are governed by administrator-defined connection rules.Block outbound connections by default when OAP is enabled permitting traffic only through approved endpoints to prevent unauthorized data movement.Leverage a hybrid enforcement model that applies direct checks for external services like Teams while using Activator-managed enforcement for workflow and job execution across workspaces.Outbound Access Protection is available in Public Preview for all Fabric customers using Operations Agent. Configure access rules from the workspace security settings.Tentative GA Scope: Activator OAP toggle for OAOntology OAP toggle for OAPower Automate OAP toggle for OA
2026-07-27

Release Status Planned -> Shipped
2026-07-27

Roadmap Item Added