vNet Injection with Power Platform
14:09 08 Dec 2025

I'm trying to get vNet injection set up for one of my Power Platform environments. The eventual goal being able to integrate Power Automate with an Open AI model using vNet injection and a private endpoint on the model side.

I've gone through the process of running the provided enterprise policy scripts from the Git repository (https://github.com/microsoft/PowerPlatform-EnterprisePolicies), and at the moment I have the following done:

1. Enterprise Policy created (using CreateSubnetInjectionEnterprisePolicy.ps1)
2. vNets set up and configured, including subnets delegated to Power Platform Enterprise Policy.
3. Policy linked using the NewSubnetInjection.ps1 script provided.
4. Power Platform environment set to managed.
5. Azure Virtual Network policy linked to the correct environment (confirmed in the Power Platform Admin console and via the GetSubnetInjectionEnterprisePolicyForEnvironment.ps1 script)

As a test to ensure my private endpoint is working correctly, I am able to do a curl test (from a VM on the same vNet, different subnet) with a simple query and I get a successful response, so I know the private endpoint is working correctly and behaving as expected.

When I try to run a simple query from Power automate, I get the error:

Action "" Failed: Public access id disabled. Please configure private endpoint.

This leads me to believe that the policy is indeed linked to/associated with the environment, but it is not in effect or being enforced, resulting in the HTTP call still trying to hit the public endpoint.

Enabling the endpoint for public access delivers the desired result, suggesting that the flow is set up correctly.

My questions and requests (in utter desperation):

1. How can I check/ensure that the policy is indeed associated with/attached to/enforced in the environment?
2. Are there any other considerations I need to give in the context of Power Platform / Power Automate that might not be widely documented?
3. Are there any UDR/security rules I need to consider on the Azure side?
4. Has anyone done the same, and are there any additional reference documentation I can look at to help me troubleshoot this.

I am truly at wits end.

azure power-automate vnet power-platform