Service tags
You can use Azure service tags to enable connections to and from Microsoft Fabric. In Azure, a service tag is a defined group of IP addresses that is automatically managed, as a group, to minimize the complexity of updates or changes to network security rules.
Which service tags are supported?
In Microsoft Fabric, you can use the service tags listed in the table below. There's no service tag for untrusted code that is used in Data Engineering items.
| Tag | Purpose | Can use inbound or outbound? | Can be regional? | Can use with Azure Firewall? |
|---|---|---|---|---|
| DataFactory | Azure Data Factory | Both | No | Yes |
| DataFactoryManagement | On premises data pipeline activity | Outbound | No | Yes |
| EventHub | Azure Event Hubs | Outbound | Yes | Yes |
| Power BI | Power BI and Microsoft Fabric | Both | No | Yes |
| PowerQueryOnline | Power Query Online | Both | No | Yes |
| KustoAnalytics | Real-Time Intelligence | Both | No | No |
| SQL | Fabric SQL database | Both | Yes | Yes |
Use service tags
You can use the service tags to define network access controls on network security groups, Azure Firewall, and user-defined routes.
Related content
Azure IP Ranges and Service Tags – Public Cloud
You can refer to thePowerBItag. Microsoft Fabric currently doesn't support regional service tags nor breakdown IP ranges by region.