IP Address Registration

(2) Share

Report

Posted on by CU19091140-0

Im doing an analysis on the suitability of Power Pages for a project with the specific requirement not to track any informaiton that can be used to identify a user. Specifically, we have to ensure that we are not saving an IP address of the sessions in the backend after the session is completed. My question is:

1. Does Microsoft save the session IP address in a Log somewhere after the session has been completed?
2. Is there a way to Purge this informaiton?
3. When looking at a Power Automate Flow Execution that is triggered from Power Pages it registers the IP address as well. Is there a way to restrict that?/ Purge the flow historical data?

Categories:

General topics

I have the same question (0)

All responses (2)

Answers (0)

Suggested answer

Jon Unzueta 1,834 Super User 2026 Season 1 on at

Like (0)

Report
Copy link

Link copied!
@CU19091140-0

Here’s a detailed breakdown of your questions regarding Power Pages, Power Automate, and IP address tracking and purging, based on the latest documentation and guidance:

1. Does Microsoft save the session IP address in a log somewhere after the session has been completed?

Yes, Power Pages can log IP addresses in several ways:

Web Application Firewall (WAF) Logs: If WAF is enabled, each request—including the client IP—is logged and stored in the Dataverse instance associated with the site.

Microsoft Purview Audit Logs: Power Pages activities are also logged in Microsoft Purview, which may include metadata such as IP addresses depending on the action and configuration.

These logs are primarily used for security, auditing, and compliance.

2. Is there a way to purge this information?

Yes, but with some caveats:

WAF Logs: These are stored in Dataverse and by default retained for 30 days. You can:

Adjust the retention period (up to 90 days).

Disable WAF logging entirely if not required.

Purview Audit Logs: These are managed by Microsoft and have fixed retention policies depending on your Microsoft 365 compliance plan:

Default: 90 days.

Extended: Up to 1 year or more with appropriate licensing (e.g., Microsoft 365 E5).

Manual deletion is not supported for audit logs.

3. Power Automate Flow Execution Logs: Can you restrict or purge IP address data?

Flow Run History: When a flow is triggered (e.g., from Power Pages), the run history may include the triggering IP address and other metadata.

Secure Inputs/Outputs: You can mask sensitive data (including IPs) by enabling Secure Inputs and Outputs on actions in your flow. This prevents data from being stored in the run history.

Purging Flow History:

There is no built-in feature to purge flow history manually.

However, Dataverse-based flows (especially desktop flows) allow you to configure log retention using the FlowLogs entity. You can set a Time to Live (TTL) in minutes, after which logs are automatically deleted.

✅ Recommendations for Your Use Case

If your project must not retain any user-identifiable data, including IP addresses:

Disable WAF logging in Power Pages if not needed.

Avoid enabling auditing in environments where IP tracking is a concern.

Use Secure Inputs/Outputs in Power Automate to prevent IPs from being stored in flow history.

Avoid using features that log to Purview unless you have a clear data retention policy.

Document your data handling practices to ensure compliance with privacy regulations.

🏷️ Tag me if you have any further questions or if the issue persists.

✅ Click "Accept as Solution" if my post helped resolve your issue—it helps others facing similar problems.

❤️ Give it a Like if you found the approach useful in any way.

Was this reply helpful? Yes No
Suggested answer

Fubar 8,487 Super User 2026 Season 1 on at

Like (0)

Report
Copy link

Link copied!

Things like multistep forms also store the clients IP address in its sessions table (though believe if you implement the WAF you can mask this). Similarly if there is an IP address stored in Dataverse it may also be being captured in the system Backups.

Was this reply helpful? Yes No