Manage remote networks

Article
10/06/2023

Remote networks connect your users in remote locations to Global Secure Access (preview). Adding, updating, and removing remote networks from your environment are likely common tasks for many organizations.

This article explains how to manage your existing remote networks for Global Secure Access.

Prerequisites

A Global Secure Access Administrator role in Microsoft Entra ID
The preview requires a Microsoft Entra ID P1 license. If needed, you can purchase licenses or get trial licenses.
To use the Microsoft 365 traffic forwarding profile, a Microsoft 365 E3 license is recommended.

Known limitations

At this time, remote networks can only be assigned to the Microsoft 365 traffic forwarding profile.

Update remote networks

You can update remote networks in the Microsoft Entra admin center or using the Microsoft Graph API.

Microsoft Entra admin center
Microsoft Graph API

To update the details of your remote networks:

Sign in to the Microsoft Entra admin center as a Global Secure Access Administrator.
Browse to Global Secure Access (preview) > Devices > Remote networks.
Select the remote network you need to update.

There are three sections with details you can edit:

Basics

From this page, you can delete the selected remote network. You can only change the name of a remote network after it's created. Select the pencil icon to edit the name of the remote network.

Screenshot of the basics tab with the pencil icon highlighted.

Links

Add a new device link or delete an existing device link from this page. You can't edit the details of a device link after it was created. Select the trash can icon to delete a remote network device link.

Screenshot of the delete option in the device links page.

Traffic profiles

From this page, you can enable or disable the available traffic forwarding profile. At this time, only the Microsoft 365 access profile can be applied to remote networks.

You can also assign a remote network to the Microsoft 365 traffic forwarding profile from Traffic forwarding area of Global Secure Access. Browse to Connect > Traffic forwarding and select the Add/edit assignments button for the traffic profile. For more information, see Global Secure Access traffic forwarding.

To edit the details of a remote network:

Sign in to Graph Explorer.
Select PATCH as the HTTP method from the dropdown.
Select the API version to BETA.
Enter the query:

    PATCH https://graph.microsoft.com/beta/networkaccess/connectivity/branches/8d2b05c5-1e2e-4f1d-ba5a-1a678382ef16
    {
        "@odata.context": "#$delta",
        "name": "ContosoRemoteNetwork2"
    }

Select Run query to update the remote network.

Delete a remote network

You can delete remote networks in the Microsoft Entra admin center or using the Microsoft Graph API.

Microsoft Entra admin center
Microsoft Graph API

Sign in to the Microsoft Entra admin center at https://entra.microsoft.com.
Browse to Global Secure Access (preview) > Devices > Remote networks.
Select the remote network you need to delete.
Select the Delete button.
Select Delete from the confirmation message.

Screenshot of the delete remote network button.

Sign in to Graph Explorer.
Select PATCH as the HTTP method from the dropdown.
Select the API version to beta.
Enter the query:

   DELETE https://graph.microsoft.com/beta/networkaccess/connectivity/branches/97e2a6ea-c6c4-4bbe-83ca-add9b18b1c6b

Select Run query to delete the remote network.

Terms of Use

Your use of the Microsoft Entra Private Access and Microsoft Entra Internet Access preview experiences and features is governed by the preview online service terms and conditions of the agreement(s) under which you obtained the services. Previews may be subject to reduced or different security, compliance, and privacy commitments, as further explained in the Universal License Terms for Online Services and the Microsoft Products and Services Data Protection Addendum (“DPA”), and any other notices provided with the Preview.