From 70445393f025dcc2cfee79b530b3a3e60fdd9002 Mon Sep 17 00:00:00 2001 From: Chris Date: Fri, 4 Aug 2023 15:42:10 -0400 Subject: [PATCH] Update cross-tenant-restrictions.md Quick update to a typo on "attach" instead of "attack". Happy Friday folks! --- power-platform/admin/cross-tenant-restrictions.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/power-platform/admin/cross-tenant-restrictions.md b/power-platform/admin/cross-tenant-restrictions.md index 039b5b41b9..6763aee303 100644 --- a/power-platform/admin/cross-tenant-restrictions.md +++ b/power-platform/admin/cross-tenant-restrictions.md @@ -24,7 +24,7 @@ Microsoft Power Platform has a rich ecosystem of connectors based on Azure Activ Note that Power Platform tenant isolation is different from Azure AD-wide tenant restriction. It *doesn't* impact Azure AD-based access outside of Power Platform. Power Platform tenant isolation only works for connectors using Azure AD-based authentication such as Office 365 Outlook or SharePoint. > [!WARNING] -> There is a [known issue](#known-issues) with [Azure DevOps connector](/connectors/visualstudioteamservices/) that results in tenant isolation policy to not be enforced for connections established using this connector. If an insider attach vector is a concern, it is recommended to limit using the connector or its actions using data policies. +> There is a [known issue](#known-issues) with [Azure DevOps connector](/connectors/visualstudioteamservices/) that results in tenant isolation policy to not be enforced for connections established using this connector. If an insider attack vector is a concern, it is recommended to limit using the connector or its actions using data policies. The default configuration in Power Platform with tenant isolation **Off** is to allow cross-tenant connections to be established seamlessly, if the user from tenant A establishing the connection to tenant B presents appropriate Azure AD credentials. If admins want to allow only a select set of tenants to establish connections to or from their tenant, they can turn tenant isolation **On**.