Creating the Enterprise Policy for Power Platform

This article provides a complete, step-by-step guide to creating and applying a Power Platform Enterprise Policy (Network Injection) using two Azure regions in the UK geography: UK South and UK West.

Official Microsoft References

  • Power Platform VNet Support Overview: https://learn.microsoft.com/en-us/power-platform/admin/vnet-support-overview
  • Power Platform VNet Setup & Configuration Guide: https://learn.microsoft.com/en-us/power-platform/admin/vnet-support-setup-configure
  • Microsoft Enterprise Policies PowerShell Module (GitHub): https://github.com/microsoft/PowerPlatform-EnterprisePolicies

1. Prerequisites

  • Before starting, ensure the following:

The Power Platform environment is a Managed Environment.

You have Azure Network Contributor (or higher) permissions.

You are a Power Platform Administrator.

Your environment is in the UK geography (paired Azure regions: UK South & UK West).

2. Retrieve VNet ARM IDs

Connect-AzAccount
Select-AzSubscription -SubscriptionId $SubscriptionId

$vnetUks = Get-AzVirtualNetwork -Name $VnetNameUKS -ResourceGroupName $ResourceGroup
$vnetUkw = Get-AzVirtualNetwork -Name $VnetNameUKW -ResourceGroupName $ResourceGroup

$vnetIdUks = $vnetUks.Id
$vnetIdUkw = $vnetUkw.Id

3. Create the Enterprise Policy (Two-Region)

$PolicyName     = "pp-ep-networkinjection-uk"
$PolicyLocation = "unitedkingdom"

New-SubnetInjectionEnterprisePolicy `
  -SubscriptionId $SubscriptionId `
  -ResourceGroupName $ResourceGroup `
  -PolicyName $PolicyName `
  -PolicyLocation $PolicyLocation `
  -VirtualNetworkId  $vnetIdUks `
  -SubnetName        $SubnetUKS `
  -VirtualNetworkId2 $vnetIdUkw `
  -SubnetName2       $SubnetUKW