Microsoft Entra Private Access and Private Link connected resources

Question

Is Private Link connected resources supported for Entra Private Access?

Answer 1

Hi Patrik,

This response may vary depening on your environment , so Microsoft Entra Private Access is designed to provide secure access to private apps across hybrid and multicloud environments, both on-premises and in the cloud. At first intance It's supported as an example:

Azure web app aplication with public access disable and private endpoint enable to vnet.

+-------------------+       +-------------------+       +-------------------+
|   User Device     |       |   Entra Private   |       |   Virtual Network |
|                   |       |       Access      |       |                   |
|   +-------------+ |       |   +-------------+ |       |   +-------------+ |
|   |   Browser   | |       |   |Glob Sec Acc | |       |   |   Web App   | |
|   |             | |       |   |Remote Net   | |       |   |             | |
|   +-------------+ |       |   +-------------+ |       |   +-------------+ |
|                   |       |                   |       |                   |
|                   |       |                   |       |                   |
|   +-------------+ |       |   +-------------+ |       |   +-------------+ |
|   |Secure Tunnel| |<----->|   |Secure Tunnel| |<----->|   | Private IP  | |
|   | (Encrypted) | |       |   | (Encrypted) | |       |   | Address (PE)| |
|   +-------------+ |       |   +-------------+ |       |   +-------------+ |
|                   |       |                   |       |                   |
+-------------------+       +-------------------+       +-------------------+

To configure this Microsoft Entra Private Access you need to go to Entra Portal and Global Secure Access, Here you can add a virtual network as remote network.

Global Secure Access (preview) supports two connectivity options: installing a client on end-user device and configuring a remote network, for example a branch location with a physical router. Remote network connectivity streamlines how your end-users and guests connect from a remote network without needing to install the Global Secure Access Client. https://learn.microsoft.com/en-us/entra/global-secure-access/concept-remote-network-connectivity

Also here there is the documentation to add a virtual network as remote network on Entra Global secure access: https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-simulate-remote-network

Addiional references:

• https://learn.microsoft.com/en-us/entra/global-secure-access/concept-private-access
• https://learn.microsoft.com/en-us/azure/private-link/private-link-overview
• https://www.youtube.com/watch?v=RsxxsEzQhrM
• https://learn.microsoft.com/en-us/entra/global-secure-access/

I hope this information help you, if you have an specific scenarie to discuss let me know. Cheers, Luis