Manage remote networks

Remote networks connect your users in remote locations to Global Secure Access (preview). Adding, updating, and removing remote networks from your environment are likely common tasks for many organizations.

This article explains how to manage your existing remote networks for Global Secure Access.

Prerequisites

• A Global Secure Access Administrator role in Microsoft Entra ID.
• The preview requires a Microsoft Entra ID P1 license. If needed, you can purchase licenses or get trial licenses.
• To use the Microsoft 365 traffic forwarding profile, a Microsoft 365 E3 license is recommended.

Known limitations

• At this time, remote networks can only be assigned to the Microsoft 365 traffic forwarding profile.

Update remote networks

You can update remote networks in the Microsoft Entra admin center or using the Microsoft Graph API.

Microsoft Entra admin center

To update the details of your remote networks:

1. Sign in to the Microsoft Entra admin center as a Global Secure Access Administrator.

2. Browse to Global Secure Access (preview) > Devices > Remote networks.

3. Select the remote network you need to update.

   

There are three sections with details you can edit. Basics, Links, and Traffic profiles.

Basics

The basics page provides a way to delete a selected remote network. You change the name of a remote network after you create it. Select the pencil icon to edit the name of the remote network.

Links

Add a new device link or delete an existing device link from this page. You can't edit the details of a device link after it was created. Select the trash can icon to delete a remote network device link.

Traffic profiles

From this page, you can enable or disable the available traffic forwarding profile. At this time, only the Microsoft 365 access profile can be applied to remote networks.

You can also assign a remote network to the Microsoft 365 traffic forwarding profile from Traffic forwarding area of Global Secure Access. Browse to Connect > Traffic forwarding and select the Add/edit assignments button for the traffic profile. For more information, see Global Secure Access traffic forwarding.

Microsoft Graph API

To edit the details of a remote network:

1. Sign in to Graph Explorer.
2. Select PATCH as the HTTP method from the dropdown.
3. Select the API version to BETA.
4. Enter the query.

    PATCH https://graph.microsoft.com/beta/networkaccess/connectivity/branches/8d2b05c5-1e2e-4f1d-ba5a-1a678382ef16
    {
        "@odata.context": "#$delta",
        "name": "ContosoRemoteNetwork2"
    }

1. Select Run query to update the remote network.

Delete a remote network

You can delete remote networks in the Microsoft Entra admin center or using the Microsoft Graph API.

Microsoft Entra admin center

1. Sign in to the Microsoft Entra admin center at https://entra.microsoft.com.
2. Browse to Global Secure Access (preview) > Devices > Remote networks.
3. Select the remote network you need to delete.
4. Select the Delete button.
5. Select Delete from the confirmation message.

Microsoft Graph API

1. Sign in to Graph Explorer.
2. Select PATCH as the HTTP method from the dropdown.
3. Select the API version to beta.
4. Enter the query.

   DELETE https://graph.microsoft.com/beta/networkaccess/connectivity/branches/97e2a6ea-c6c4-4bbe-83ca-add9b18b1c6b 

1. Select Run query to delete the remote network.

Terms of Use

Your use of the Microsoft Entra Private Access and Microsoft Entra Internet Access preview experiences and features is governed by the preview online service terms and conditions of the agreement(s) under which you obtained the services. Previews may be subject to reduced or different security, compliance, and privacy commitments, as further explained in the Universal License Terms for Online Services and the Microsoft Products and Services Data Protection Addendum (“DPA”), and any other notices provided with the Preview.

Next steps

• List remote networks
• Manage remote network device links