Table of Contents
Summary
- Tenant isolation feature in Power Platform will be enabled by default.
- Cross-tenant connections will be blocked; connections within the same tenant remain unaffected.
- Guest user access will not be impacted by this change.
- Administrators can prepare by configuring tenant isolation or disabling it before enforcement.
- Documentation available for further guidance on configuring tenant isolation policies.
Admin Impact: High
User Impact: Low
Release Start: 01 Feb 2026
Release End: 01 Feb 2026
Services: Power Platform
Category: Stay informed
History
1/22/2026 Item Added to Message Center
Microsoft Message
As part of our Secure Future Initiative (SFI), the tenant isolation feature will be enabled by default for all Power Platform tenants as the new default behavior. The enforcement is scheduled to begin on February 1, 2026.
This feature applies only to Power Platform policies and is separate from guest access policies and Azure tenant restriction features.
How does this affect me?
Tenant isolation only applies to connectors running within a tenant. The default tenant isolation behavior will block all connection attempts from one tenant to another; inbound (connections to the tenant from external tenants), outbound (connections from the tenant to external tenants), or both (inbound – outbound) will be blocked by Power Platform.
Communications within the same tenant will not be affected. In addition, users who sign in as guests (guest user access) will remain unaffected.
What do I need to do to prepare?
If you want to allow cross-tenant connections in Power Platform prior to the enforcement date, you can set up tenant isolation and explicitly allow individual tenants. Alternatively, you can disable tenant isolation entirely.
If either of these actions are performed prior to February 1, 2026, your configuration will not be changed as part of the enforcement. If no action is taken, all cross-tenant connections will be blocked by default starting on February 1, 2026.
For more information and to learn how to configure a tenant isolation policy, please review the Cross-tenant inbound and outbound restrictions documentation.