Forum Discussion
Is Microsoft Entra authentication mandatory for Fabric GraphQL APIs?
Hi Team,
I have created a GraphQL API in Microsoft Fabric and I am trying to consume it from an external application (Salesforce/Postman).
Currently, I have only the GraphQL endpoint URL. When I try to access the endpoint, I receive a 401 Unauthorized response.
Is Microsoft Entra ID authentication (Tenant ID, Client ID, Client Secret, Access Token) mandatory for accessing Fabric GraphQL APIs?
Is there any way to access the API using existing workspace permissions without configuring an Entra App?
Thanks.
- Yes — Microsoft Entra authentication is required for Fabric GraphQL APIs.The endpoint is not publicly accessible, so having the URL alone is not enough. All requests must be authenticated using an access token (typically via Entra ID / OAuth).Workspace permissions don’t replace this — they are only evaluated after authentication, not instead of it.That’s why you’re getting a 401 Unauthorized response: the request doesn’t include a valid token.So to call the API from Postman or Salesforce, you’ll need to:- register an app in Microsoft Entra ID- obtain an access token (client credentials or delegated flow)- include the token in the Authorization headerThere isn’t currently a way to call Fabric GraphQL APIs using only workspace permissions without Entra authentication.
If you have any further questions regarding this matter, please ask them.Best regardsSolutions Architect · Microsoft Fabric Specialist - Parchitect💡Did my response help you? Clicking Kudos is a small gesture that goes a long way, it encourages contributors and helps the community thrive!
✔️Did I answer your question? Please mark my post as a Solution, it helps others find the answer faster. Hi YashMoroliya
Please follow these steps below in the document below in order to create the permissions needed to authenticate successfully to then query the Graph API. https://learn.microsoft.com/en-us/fabric/data-engineering/connect-apps-api-graphql
5 Replies
troubleshoot it
- Yes — Microsoft Entra authentication is required for Fabric GraphQL APIs.The endpoint is not publicly accessible, so having the URL alone is not enough. All requests must be authenticated using an access token (typically via Entra ID / OAuth).Workspace permissions don’t replace this — they are only evaluated after authentication, not instead of it.That’s why you’re getting a 401 Unauthorized response: the request doesn’t include a valid token.So to call the API from Postman or Salesforce, you’ll need to:- register an app in Microsoft Entra ID- obtain an access token (client credentials or delegated flow)- include the token in the Authorization headerThere isn’t currently a way to call Fabric GraphQL APIs using only workspace permissions without Entra authentication.
If you have any further questions regarding this matter, please ask them.Best regardsSolutions Architect · Microsoft Fabric Specialist - Parchitect💡Did my response help you? Clicking Kudos is a small gesture that goes a long way, it encourages contributors and helps the community thrive!
✔️Did I answer your question? Please mark my post as a Solution, it helps others find the answer faster. Hi YashMoroliya
Please follow these steps below in the document below in order to create the permissions needed to authenticate successfully to then query the Graph API. https://learn.microsoft.com/en-us/fabric/data-engineering/connect-apps-api-graphql
Hi YashMoroliya,
Thank you for reaching out to the Microsoft Fabric Community Forum and thanks to Parchitect and GilbertQ for sharing helpful insights.
Just checking in, were you able to resolve the issue? If not please feel free to share an update and we will be happy to assist further. Your feedback will also help others facing similar challenges.
Thank you.Hi YashMoroliya,
Could you please confirm whether the issue has been resolved or is still occurring? Your update may help others with similar concerns. Please let us know if you need any further assistance.
Thank you.
