cancel
Showing results for 
Search instead for 
Did you mean: 

Security - restrict HTTP - Request trigger by IP address, tenant, group, users

I want to secure my flows by restrict IP address, tenant, group, users for HTTP - Request trigger.

 

My scenario:

1. Restrict in my company ipaddress to use my flows which trigger by HTTP - Request.

2. Restrict in my users of our Office 365 group to use my flows which the trigger by HTTP - Request and use from SharePoint - Flow menu.

 

Secure:

Current, Anyone who know HTTP POST URL of the trigger, can use our Flows.

At SharePoint, When create Flow by template 'Complete a custom action for the selected item', the new flow by trigger HTTP - Request, and can use anyone who know HTTP POST URL.

 

Regards,

Yoshihiro Kawabata

 

 

 

 

Status: Under Review

Thank you for the idea, we will evaulate this.

Comments
Level 10

Thank you for your vote to this ideaSecurity - restrict HTTP - Request trigger by IP address, tenant, group, users .

 

Please comments your think, and your scenarios.

Level: Power Up

Hi team,

We also have a similar requirement in which we want to enforce security on the HTTP POST URL to restrict access to this url.

Any ideas would be appreciated.

Thanks

Jyoti

Power Automate Staff
Status changed to: Under Review

Thank you for the idea, we will evaulate this.

Level 10

@Stephen Are there any updates here? It is very difficult to build flows, especially those realted to personal data, without the option of restricting who can make calls to our HTTP endpoints.

Adding this feature would massivly increase the types of flows we can create. Today we are restricted due to this security vunerability.

 

Thanks

Level 10

Yes @Anonymous

 

The Security is a mandatory requirement to use the personal data.