Document Intelligence Services with PowerAutomate + Restrict Public Access

Hello Michail David Gkikas,

Welcome to Microsoft Q&A! Thanks for posting the question.

As I understand that you are trying to restrict public access to your Azure Document Intelligence Service while still allowing access from Power Automate within your tenant, follow these steps

Disable Public Access to prevent the service from being accessed over the public internet. In the Azure Portal, navigate to the service’s Networking settings and either disallow public access or enable firewall rules to permit only trusted Microsoft services.

Create a Private Endpoint to establish a secure connection between your Azure Virtual Network (VNet) and the service. This involves adding a private endpoint in the service’s Networking settings, selecting the appropriate VNet and subnet, and configuring DNS to resolve the service’s private IP address. This ensures the service is only accessible from within your organization's network.

Configure Managed Identities to securely authenticate your workflows in Power Automate. Assign a managed identity to Power Automate or use a service principal. Grant this identity the necessary permissions to access the Document Intelligence Service. This eliminates the need for hardcoding credentials and ensures secure, tenant-restricted access to the service.

For more information, please refer this document 

Configure secure access with managed identities and virtual networks.

I hope you understand, do let us know if you any further queries.

Thank you!

Hi Michail David Gkikas,

Did you get any chance to check the above response. Thank you!

Hi SriLakshmi C,

I have seen this and set up private endpoint already but i am stuck on the powerautomate side.
How do I make the API call for example now to the prebuilt read model? Until now I was using the Analyze Document for Prebuilt or Custom models (v3.x API) action which has a connection using a key and endpoint as input.

Could you please provide me the example of the powerautomate workflow?

Thank you!

Hi SriLakshmi C,

I have seen this and set up private endpoint already but i am stuck on the powerautomate side. How do I make the API call for example now to the prebuilt read model? Until now I was using the Analyze Document for Prebuilt or Custom models (v3.x API) action which has a connection using a key and endpoint as input.

Could you please provide me the example of the powerautomate workflow?

Thank you!

Hi Michail David Gkikas,

Thank you for the follow up query!

To integrate Power, automate with your Azure Document Intelligence service using a private endpoint, first ensure that the private endpoint is properly configured, and DNS settings resolve the service's private IP address. This may involve using a custom DNS server or Azure-provided DNS to test connectivity. Next, update your Power Automate workflow by replacing the default Analyze Document action with an HTTP action. Configure the HTTP action to call the private endpoint's API URL, set the method to POST, and include the required headers (Content-Type and subscription key). This ensures secure communication between Power Automate and your Azure Document Intelligence resource.

please refer this document, Use a document processing model in Power Automate.