Stay organized with collectionsSave and categorize content based on your preferences.
VPC Service Controls provides additional security for the Managed Service for Microsoft Active Directory
service and its resources. For more information, seeVPC Service Controls.
Additional configuration
Enabling on-premises access to Managed Microsoft AD API and using a
Shared VPC with the Managed Microsoft AD domain require additional
configuration.
Enabling on-premises access to Managed Microsoft AD API
When using aShared VPC, the Managed Microsoft AD domain must be created in
the host project and the Shared VPC network host must be located within the same
service perimeter as the projects connected to the network.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-04 UTC."],[],[],null,["# Configure VPC Service Controls\n\nVPC Service Controls provides additional security for the Managed Service for Microsoft Active Directory\nservice and its resources. For more information, see\n[VPC Service Controls](/vpc-service-controls/docs/overview).\n\nAdditional configuration\n------------------------\n\nEnabling on-premises access to Managed Microsoft AD API and using a\nShared VPC with the Managed Microsoft AD domain require additional\nconfiguration.\n\n### Enabling on-premises access to Managed Microsoft AD API\n\nTo enable on-premises access to the Managed Microsoft AD API, you must\n[set up private connectivity](/vpc-service-controls/docs/set-up-private-connectivity).\n\n### Using a Shared VPC\n\nWhen using a [Shared VPC](/vpc/docs/shared-vpc), the Managed Microsoft AD domain must be created in\nthe host project and the Shared VPC network host must be located within the same\nservice perimeter as the projects connected to the network.\n\nFor information about how to deploy Managed Microsoft AD with cross-project\naccess using Shared VPC, see [Deploy Managed Microsoft AD with\ncross-project access using domain\npeering](/managed-microsoft-ad/docs/shared-vpc-managedad-cloudsql).\n\nWhat's next\n-----------\n\n- Learn more about the [VPC Service Controls support for Managed Microsoft AD](/vpc-service-controls/docs/supported-products#table_managed_ad)"]]
