Issue:
Recently I got a query from a citizen developer about a
message showing on the Power Automate home page that whether they need to worry
about this or not.
Generally, I am not used to reading the warnings posted
by Microsoft on the home page of Power Platform applications but as this was a
query, I needed to look into it, and I found out that this might not be much
worry on the first reading.
Analysis:
As it suggests in the message as well, when you click
on the “Learn More” link, you will read similar stuff that Microsoft is
changing the URL of Power automate from “https://flow.micrsoft.com” to
“https://make.powerautomate.com”.
Also, it is mentioned in the article that once the
changes are done, Microsoft will route all the traffic requests to the new URL
and users will be redirected to new URL. Though they suggest if they can update
their bookmark, it would be useful to change it to a new URL.
Below are the new URL details provided by Microsoft:
|
# |
Existing
Power Automate URL |
New
Power Automate URL |
|
1 |
*.flow.microsoft.com |
*.powerautomate.com |
|
2 |
flow.microsoft.com |
make.powerautomate.com |
|
|
|
|
|
For
US Government Customers |
||
|
1 |
gov.flow.microsoft.us |
make.gov.powerautomate.us |
|
2 |
high.flow.microsoft.us |
make.high.powerautomate.us |
|
3 |
flow.appsplatform.us |
make.powerautomate.appsplatform.us |
|
|
|
|
|
For
China Customers |
||
|
1 |
powerautomate.cn |
make.powerautomate.cn |
But then I read it twice more to understand the impact
on a bigger scale and it is actually a big change. Let’s say you have an IT
administrator who has added IP config rules and is not allowing any other URL
without prior approval from the network. This would break any flow running because the request would be coming from a new site and would be
blocked.
This scenario can happen to Gateway connections
especially. As it could be configured to interact with your local cloud. It will also affect to US Government
customers as it has strict URL policies.
So how do you know whether you will be affected by it or
not?
There is a paragraph where Microsoft has mentioned
that the image in the beginning of the post will be in red color if you are
affected. This means you will be facing errors in your flow once the URL change
will be implemented.
The following table lists the services to which
Power Automate connects. Ensure none of these services are blocked on your
network.
|
Domains |
Protocols |
Uses |
|
management.azure.com |
https |
Access to the Azure Resource Manager. |
|
login.microsoft.com |
https |
Access to authentication and authorization
endpoints. |
|
graph.microsoft.com |
https |
Access to Microsoft graph - for getting user
information such as a profile photo. |
|
*.azure-apim.net |
https |
Access to the Runtime for Connectors. |
|
*.flow.microsoft.com |
https |
Access to the Power Automate site. |
|
*.powerautomate.com |
https |
Access to Power Automate site. |
|
*.powerapps.com |
https |
Access to the Power Apps site. |
|
*.azureedge.net |
https |
Access to the Power Automate CDN. |
|
nps.onyx.azure.net |
https |
Access to NPS (Net Promoter Score). |
|
webshell.suite.office.com |
https |
Access to Office for header and search. Please
see the Office
365 urls and ranges for more details. |
|
*.dynamics.com |
https |
Access to Dataverse tables |
|
go.microsoft.com |
https |
Access to the Power Automate to check for updates |
|
download.microsoft.com |
https |
Access to the Power Automate to check for updates |
|
login.partner.microsoftonline.cn |
https |
Access to the Power Automate for desktop cloud
discovery |
Note –
It is not necessary that you see red flags on Power
Automate home as per my understanding.
This depends on Microsoft and Your company agreement and if your
company has not provided access to your network detection, you may not see this
red flag.
For more details, please refer to below link:
·
Power
Automate IP address configuration
This change is scheduled for the end of June as per the
article. Microsoft has only initiated new sites yet. But once they release
the changes, sooner or later they will block the old URL. Before that Microsoft
might change the banner's color or shoot an email thread. If you want to
be prepared in advance you can perform the check on IP configuration. If you
still face the issue, you can always generate a ticket with Microsoft for the same.
Reference:
