Fabric URLs to allow

This page's changes and edits · All guidance changes

Microsoft's edit · 10 Jun 2025 21:00 UTC

Correct spellings of back end and take out whitelist

Microsoft's commit message in MicrosoftDocs/fabric-docs · commit afcd2d3 · +6 −6 lines · also on GitHub

⋯ 10 unchanged lines

1111

1212 # Add Fabric URLs to your allowlist

1313

14 −An allowlist (sometimes referred to as a whitelist) is a security mechanism used to permit access only to specific, trusted resources. In the context of Microsoft Fabric, an allowlist ensures that your network can connect to the required and optional Fabric services by explicitly allowing traffic to and from specific URLs. This approach helps secure your environment by blocking unauthorized or unknown connections while enabling essential communication with Fabric services.

14 +An allowlist is a security mechanism used to permit access only to specific, trusted resources. In the context of Microsoft Fabric, an allowlist ensures that your network can connect to the required and optional Fabric services by explicitly allowing traffic to and from specific URLs. This approach helps secure your environment by blocking unauthorized or unknown connections while enabling essential communication with Fabric services.

1515

1616 This article contains the allowlist of the Microsoft Fabric URLs required for interfacing with Fabric workloads. For the Power BI allowlist, see [Add Power BI URLs to your allowlist](./power-bi-allow-list-urls.md).

1717

18 −The URLs in the allowlist play a critical role in enabling connectivity to Fabric services. These URLs represent endpoints that your network must access for Fabric workloads to function properly. For example, they may correspond to APIs, authentication services, or other backend systems that Fabric relies on. The URLs are used in various scenarios, such as accessing the Fabric portal, running workloads, or enabling specific features.

18 +The URLs in the allowlist play a critical role in enabling connectivity to Fabric services. These URLs represent endpoints that your network must access for Fabric workloads to function properly. For example, they may correspond to APIs, authentication services, or other back-end systems that Fabric relies on. The URLs are used in various scenarios, such as accessing the Fabric portal, running workloads, or enabling specific features.

1919

2020 The URLs are divided into two categories: required and optional. The required URLs are necessary for the service to work correctly. The optional URLs are used for specific features that you might not use. To use Fabric, you must be able to connect to the endpoints marked required in the tables in this article, and to any endpoints marked required on the linked sites. If the link to an external site refers to a specific section, you only need to review the endpoints in that section. You can also add endpoints that are marked optional to allowlists for specific functionality to work.

2121

⋯ 33 unchanged lines

5555 |:---------|:---------|:---------|

5656 |**For outbound connections**|||

5757 |**Required**: Portal|*.powerbi.com|TCP 443|

58 −|**Required**: Backend APIs for Portal|*.pbidedicated.windows.net|TCP 443|

58 +|**Required**: Back-end APIs for Portal|*.pbidedicated.windows.net|TCP 443|

5959 |**Required**: Cloud pipelines|No specific endpoint is required|N/A|

6060 |**Optional**: On-premises data gateway login|\*.login.windows.net login.live.com aadcdn.msauth.net login.microsoftonline.com \*.microsoftonline-p.com [See the documentation for Adjust communication settings for the on-premises data gateway](/data-integration/gateway/service-gateway-communication#ports)|TCP 443|

6161 |**Optional**: On-premises data gateway communication|*.servicebus.windows.net|TCP 443 TCP 5671-5672 TCP 9350-9354|

⋯ 20 unchanged lines

8282 |Purpose |Endpoint |Port |

8383 |:---------|:---------|:---------|

8484 |Inbound connections (icons)|http://res.cdn.office.net/|N/A|

85 −|**Required**: Notebook backend|https://\*.pbidedicated.windows.net wss://\*.pbidedicated.windows.net (HTTP/WebSocket)|N/A|

86 −|**Required**: Lakehouse backend|https://onelake.dfs.fabric.microsoft.com|N/A|

87 −|**Required**: Shared backend|https://*.analysis.windows.net|N/A|

85 +|**Required**: Notebook back end|https://\*.pbidedicated.windows.net wss://\*.pbidedicated.windows.net (HTTP/WebSocket)|N/A|

86 +|**Required**: Lakehouse back end|https://onelake.dfs.fabric.microsoft.com|N/A|

87 +|**Required**: Shared back end|https://*.analysis.windows.net|N/A|

8888 |**Required**: DE/DS extension UX|https://pbides.powerbi.com|N/A|

8989 |**Required**: Notebooks UX|https://aznb-ame-prod.azureedge.net|N/A|

9090 |**Required**: Notebooks UX|https://*.notebooks.azuresandbox.ms|N/A|

⋯ 45 unchanged lines

Microsoft's Markdown source from MicrosoftDocs/fabric-docs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 9 Oct 23:52 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.