fabrical.
Back to feed
Fabric Recent Update·Mar 24, 2026·Sunitha Muthukrishna

Tenant level private link support for Microsoft Fabric API for GraphQL (Generally Available)

View original article

If you haven’t already, check out Arun Ulag’s hero blog “FabCon and SQLCon 2026: Unifying databases and Fabric on a single, complete platform” for a complete look at all of our FabCon and SQLCon announcements across both Fabric and our database offerings. 

Microsoft Fabric API for GraphQL now supports Tenant Level Private Link, delivering enterprise-grade network security to your data APIs. This highly requested feature enables organizations to access their GraphQL APIs through private connectivity, ensuring that data traffic never traverses the public internet.

Secure your data access layer

Microsoft Fabric API for GraphQL has revolutionized how developers access data across warehouses, lakehouses, mirrored databases, and SQL databases. With its ability to query multiple data sources through a single, flexible API, it’s become an essential tool for building modern data applications. Now, with Private Link support, you can extend these capabilities with the security and compliance controls your organization’s demands.

When you enable Private Link for your Fabric tenant, your GraphQL API endpoints benefit from the same private network connectivity as other Fabric services. API traffic flows through Microsoft’s private backbone network instead of the public internet, providing an additional layer of protection for your sensitive data.

Why private link matters for API for GraphQL

  • Enhanced security: Private Link ensures that all GraphQL API requests flow through a secured network path. This is particularly critical for organizations handling sensitive data, as it eliminates exposure to public internet threats and reduces your attack surface.
  • Regulatory compliance: Many industries require private network connectivity for data access. With Private Link support, organizations in healthcare, finance, and government sectors can now leverage GraphQL APIs while meeting strict compliance requirements for data isolation and network security.
  • Simplified network architecture: Rather than managing complex firewall rules, VPN configurations, or IP allowlists, Private Link provides a straightforward way to secure API access. Your network administrators can ensure that GraphQL API calls only come through approved private endpoints, making governance simpler and more reliable.
  • Enterprise integration: For organizations already using Azure Private Link across their infrastructure, adding GraphQL APIs to your private network topology is seamless. Your APIs integrate naturally with your existing virtual networks, making it easier to build comprehensive data architectures that maintain consistent security standards.

Designed for enterprise workloads

This feature is built with enterprise needs in mind. Whether you’re building internal dashboards, powering business intelligence applications, or creating customer-facing analytics, Private Link support ensures your GraphQL APIs meet the security standards your organization requires.

When Private Link is enabled at the tenant level, your GraphQL APIs automatically participate in the secure network environment. Combined with Microsoft Entra ID authentication and the flexible security options already available—like single sign-on or saved credentials—you have a comprehensive security model for controlling data access.

Getting started

Enabling Private Link for your GraphQL APIs is straightforward through your Fabric tenant settings. Once configured at the tenant level, your existing GraphQL APIs will automatically leverage the private network connectivity. You can continue using the same API endpoints and authentication patterns you’ve already established, with the added confidence that traffic flows through your organization’s secured network path.

The image displays a configuration page for enabling Azure Private Link within an organization, outlining the process of setting up and permissions required for its implementation.

Figure: Enable tenant level setting for private link.

For organizations using the “Block Public Internet Access” tenant setting, GraphQL APIs now work seamlessly within your locked-down environment, giving you complete control over how data is accessed.

Current limitations

As we launch Private Link support for API for GraphQL, there are two limitations to be aware of:

  • API monitoring dashboard and logging based on Workspace Monitoring is not currently supported. While your APIs will function securely through Private Link, workspace-level monitoring capabilities are not yet available in this configuration.
  • Service Principal (SPN) access with saved credentials is not currently supported. Service Principals (SPN) are supported as clients however it’s not possible to use a service principal to create a saved credential for access between the API and data source.

Learn more

Related blog posts

Tenant level private link support for Microsoft Fabric API for GraphQL (Generally Available)

dbt+ Microsoft Fabric: A strategic investment in the modern analytics stack

Modern analytics teams are adopting open, SQL-first data transformation, robust CI/CD and governance, and seamless integration across lakehouse and warehouse platforms. dbt is now the standard for analytics engineering, while Microsoft Fabric unifies data engineering, science, warehousing, and BI in OneLake.

Support for default arguments in Fabric User data functions

The Fabric user data functions (UDF) programmability model now includes the ability to define functions with default argument values. This feature allows you streamline your workflow by minimizing the need to specify every argument each time you call a function—any parameters you leave out will automatically use their default values. As a result, you can write cleaner, more concise code and focus on the logic that matters most.

Microsoft Fabric

Accelerate your data potential with a unified analytics solution that connects it all. Microsoft Fabric enables you to manage your data in one place with a suite of analytics experiences that seamlessly work together, all hosted on a lake-centric SaaS solution for simplicity and to maintain a single source of truth.

Get the latest news from Microsoft Fabric Blog

This will prompt you to login with your Microsoft account to subscribe

Visit our product blogs

View articles by category

View articles by date

What's new

Microsoft Store

Education

Business

Developer & IT

Company

  • © 2026 Microsoft
  • Manage Cookies
  • Contact Microsoft
  • Privacy
  • Terms of use
  • Trademarks
  • About our ads
#Data Engineering#Microsoft Fabric