MC1457694 – M365 Change Digest

One-line summary

Wildcard (*) support in Power Pages Web API field configuration ends September 14, 2026; specify columns explicitly to ensure continued access and avoid HTTP 403 errors.

Similar updates

Details

Body (from Message Center)

Starting on September 14, 2026, Wildcard (*) in the Web API field configuration will have reached end of support.

How does this affect me?
After September 14, 2026, support for the Wildcard value (*) in the Web API field configuration will be removed in phases over the following weeks.

The Wildcard (*) configuration exposes all columns in a Dataverse table through the Power Pages Web API. To improve security and align with least-privilege access principles, Power Pages now requires an explicit list of columns to be specified in the Webapi//fields site setting. This change helps prevent unintended exposure of additional columns and provides greater control over data accessible through the Web API. For more details, please refer to Power Pages portals Web API overview.

What action do I need to take?
If your websites currently use the wildcard value (*) in any Webapi//fields site setting, please perform the below steps:

Review the tables exposed through the Power Pages Web API.
Replace the Wildcard value (*) with an explicit comma-separated list of columns that should be accessible.
Validate your website's functionality after updating the configuration.

If action is not taken before phased enforcement reaches your site after September 14, 2026, Web API requests against any table that use the Wildcard value (*) may return an HTTP 403 error, which could affect functionality based on those Web API calls until the configuration is updated.

Please contact Microsoft support if you need further assistance.

Raw JSON (for debugging)

Expand/collapse the full payload below.

Show/hide raw

{
  "snapshot_item": {
    "action_required_by": null,
    "ai_action_required_by": "2026-09-14T00:00:00Z",
    "ai_actions": [
      "Review tables exposed via Power Pages Web API.",
      "Replace wildcard (*) with explicit columns list in Webapi/\u003ctable\u003e/fields.",
      "Validate website functionality after configuration update."
    ],
    "ai_master_tags": [
      "Admin",
      "Security"
    ],
    "ai_model": "gpt-4.1",
    "ai_summary": "Wildcard (*) support in Power Pages Web API field configuration ends September 14, 2026; specify columns explicitly to ensure continued access and avoid HTTP 403 errors.",
    "ai_topics": [
      "Power Platform"
    ],
    "category": "stayInformed",
    "details_map": {},
    "id": "MC1457694",
    "importance": 3,
    "is_major_change": false,
    "last_modified": "2026-08-19T17:18:24Z",
    "ms_products": [
      "Power Platform"
    ],
    "platforms": null,
    "roadmap_ids": [],
    "services": [
      "Power Platform"
    ],
    "severity": "normal",
    "tags": [
      "Admin impact"
    ],
    "title": "Power Pages- Information regarding the end of support for Wildcard (*) in the Web API field configuration"
  }
}