> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cognite.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Private Link and Local Network Access browser permission

> Manage browser permissions for Local Network Access when using Private Link with Cognite Data Fusion (CDF).

When you use CDF with Private Link, your browser may prompt you to allow local network access. This article explains why this happens and how to manage the permission.

## Why you see the Local Network Access permission prompt

CDF Private Link endpoints use private IP addresses on your local network to provide secure connectivity to CDF. Starting with Google Chrome v.142 and Microsoft Edge v.143, browsers require explicit permission before a public website can access local network resources. This [Local Network Access](https://developer.chrome.com/blog/local-network-access) security feature affects your Private Link endpoint. You can grant this permission through a prompt or by [implementing a browser policy](#prevent-the-permission-prompt-with-browser-policy).

<Warning>
  When accessing a Private Link-enabled CDF project, you **must** select **Allow** on the permission prompt. This grants CDF access to local network resources and saves the preference in your browser. CDF will only use this permission to access your CDF Private Link endpoint.
</Warning>

## Restore access if blocked

If you accidentally click **Block**, you'll lose access to data within your Private Link-enabled CDF project. To restore access, follow these browser-specific steps:

<Tabs>
  <Tab title="Chrome">
    <Steps>
      <Step title="Open Chrome settings">
        Open Chrome and navigate to: `chrome://settings`
      </Step>

      <Step title="Access site settings">
        Go to **Privacy and security** > **Site settings**.
      </Step>

      <Step title="View stored site data">
        Scroll down to **View permissions and data stored across sites** (or search for "cognite.com" in the search bar at the top of Site settings).
      </Step>

      <Step title="Find the Cognite Data Fusion entry">
        Search for "cognite.com" and click the expand icon on the right.
      </Step>

      <Step title="Delete site data">
        Find the entry associated with your specific Cognite Data Fusion organization (for example, `acme.fusion.cognite.com`) and select the trash can icon (or **Delete data**).
      </Step>

      <Step title="Confirm deletion">
        Confirm the deletion by selecting **Delete**.
      </Step>
    </Steps>
  </Tab>

  <Tab title="Edge">
    <Steps>
      <Step title="Open Edge settings">
        Open Edge and navigate to: `edge://settings`
      </Step>

      <Step title="Access site permissions">
        Go to **Privacy, search, and services** > Select **Site permissions** > Select **All Sites**.
      </Step>

      <Step title="Delete Cognite Data Fusion data">
        Search for "cognite.com" and click the trash can icon (or **Delete data**) next to your specific Cognite Data Fusion organization's entry (for example, `acme.fusion.cognite.com`).
      </Step>
    </Steps>
  </Tab>
</Tabs>

<Note>
  The next time you visit CDF, the permission prompt will appear again. You must select **Allow** to restore access.
</Note>

## Prevent the permission prompt with browser policy

To prevent the permission prompt and ensure uninterrupted access, implement a browser policy change to permanently allow local network access from CDF.

Configure the browser policy (`LocalNetworkAccessBlockedForUrls`) to allow local network access for:

* The specific URL of your CDF domain: `https://acme.fusion.cognite.com` (replace `acme` with your organization name)
* All CDF subdomains: `[*.]fusion.cognite.com`

### Policy documentation

Refer to the vendor documentation for browser-specific instructions:

* [Chrome Enterprise Policy Documentation](https://chromeenterprise.google/policies/#LocalNetworkAccessBlockedForUrls)
* [Microsoft Edge Browser Policy Documentation](https://learn.microsoft.com/en-us/deployedge/microsoft-edge-policies#localnetworkaccessblockedforurls)