Service tags

You can use Azure service tags to enable connections to and from Microsoft Fabric. In Azure, a service tag is a defined group of IP addresses that is automatically managed, as a group, to minimize the complexity of updates or changes to network security rules.

Which service tags are supported?

In Microsoft Fabric, you can use the service tags listed in the table below. There's no service tag for untrusted code that is used in Data Engineering items.

Tag	Purpose	Can use inbound or outbound?	Can be regional?	Can use with Azure Firewall?
DataFactory	Azure Data Factory	Both	No	Yes
DataFactoryManagement	On premises data pipeline activity	Outbound	No	Yes
EventHub	Azure Event Hubs	Outbound	Yes	Yes
Power BI	Power BI and Microsoft Fabric	Both	No	Yes
PowerQueryOnline	Power Query Online	Both	No	Yes
KustoAnalytics	Real-Time Intelligence	Both	No	No

Use service tags

You can use the service tags to define network access controls on network security groups, Azure Firewall, and user-defined routes.

Related content

• Private endpoints

• Azure IP Ranges and Service Tags – Public Cloud
  You can refer to the PowerBI tag. Microsoft Fabric currently doesn't support regional service tags nor breakdown IP ranges by region.