MC1262537: Power Platform admin center – Upcoming update to the enforcement of tenant isolation

Following customer feedback and support ticket evaluation, we have updated our tenant isolation enforcement policy. Starting March 30, 2026, only new tenants will have tenant isolation enabled by default. Additionally, existing tenants will not have their existing tenant isolation turned on if the option is blank as setup is opt-in.

How does this affect me?
Tenant isolation only applies to connectors running within a tenant. The default tenant isolation behavior will block all connection attempts from one tenant to another; inbound (connections to the tenant from external tenants), outbound (connections from the tenant to external tenants), or both (inbound - outbound) will be blocked by Power Platform.

Communications within the same tenant will not be affected. In addition, users who sign in as guests (guest user access) will remain unaffected.

What do I need to do to prepare?
For existing tenants, we highly recommend enabling tenant isolation following the instructions outlined in Allow tenant isolation and configure the allow list.

If you want to allow cross-tenant connections in Power Platform prior to the enforcement date, you can set up tenant isolation and explicitly allow individual tenants. Alternatively, you can disable tenant isolation entirely.

If either of these actions are performed prior to March 30, 2026, your configuration will not be changed as part of the enforcement.

For more information and to learn how to configure a tenant isolation policy, please review the Cross-tenant inbound and outbound restrictions documentation.