Edit

Allow extensions to access local network resources

Azure DevOps Services

Some web browsers block calls from iframes to local network resources as part of Private Network Access protections. This blocking affects Azure DevOps organizations that use extensions that call back-end services hosted on internal company networks, such as:

  • Custom extensions that connect to on-premises REST APIs or microservices
  • Extensions that integrate with internal build servers or artifact repositories
  • Extensions that communicate with self-hosted reporting or monitoring tools

If you need to keep using these extensions, toggle on the security policy Allow extensions to access local network resources.

Important

Enabling this policy relaxes browser-level network protections for all extensions in your organization. Only enable it if you trust the extensions installed in your organization and you have a business need to access local network resources. Review your installed extensions regularly and remove any that are unnecessary. For more information, see Manage high privilege extensions.

Prerequisites

Category Requirements
Permissions Member of the Project Collection Administrators group. Organization owners are automatically members of this group.

Enable the local network access policy

  1. Sign in to your organization (https://dev.azure.com/{Your_Organization}).

  2. Select gear icon Organization settings.

  3. Select Policies.

  4. Under Security policies, toggle Allow extensions to access local network resources to On.

    Screenshot showing the allow extensions to access local network resources toggle.

Note

The policy is Off by default. An authorized user must toggle it On if needed.