---
title: Apps must enable bulk operations before use - Shopify developer changelog
description: >-
  Shopify’s developer changelog documents all changes to Shopify’s platform.
  Find the latest news and learn about new platform opportunities.
source_url:
  html: >-
    https://shopify.dev/changelog/posts/apps-must-enable-bulk-operations-before-use
  md: >-
    https://shopify.dev/changelog/posts/apps-must-enable-bulk-operations-before-use.md
metadata:
  effectiveApiVersion: ''
  affectedApi:
    - displayName: GraphQL Admin API
      handle: admin-graphql
  primaryTag:
    displayName: API
    handle: api
  secondaryTag:
    displayName: Update
    handle: update
  indicatesActionRequired: false
  createdAt: '2026-11-06T12:38:28-05:00'
  postedAt: '2026-11-06T14:15:00-05:00'
  updatedAt: '2026-11-06T12:55:24-05:00'
  effectiveAt: '2026-11-07T12:00:00-05:00'
---

November 6, 2026

# Apps must enable bulk operations before use

DateNovember 6, 2026

FlagsUpdate

Tags[Security](https://shopify.dev/changelog?filter=security)[GraphQL Admin API](https://shopify.dev/changelog?api_type=admin-graphql)

Starting today, apps need access to [bulk operations](https://shopify.dev/docs/apps/build/apis/graphql-admin/bulk-operations/queries) before they can run bulk queries or bulk mutations with the GraphQL Admin API. You can enable access for your app in the Partner Dashboard.

## What changed

Bulk queries and bulk mutations are enabled separately:

* To run [`bulkOperationRunQuery`](https://shopify.dev/docs/api/admin-graphql/latest/mutations/bulkOperationRunQuery), your app needs access to bulk queries.
* To run [`bulkOperationRunMutation`](https://shopify.dev/docs/api/admin-graphql/latest/mutations/bulkOperationRunMutation), your app needs access to bulk mutations.

If your app starts a bulk operation without access, then the request returns an access denied error. The requirement applies to all GraphQL Admin API versions.

## Who's affected

Public apps and custom apps that you build as a partner and that run bulk operations are affected. Apps that merchants create in the Shopify admin or the Dev Dashboard aren't affected at this time.

If your app already runs bulk operations, then we've already enabled access for it. You can confirm this in the Partner Dashboard.

Apps that haven't run a bulk query or bulk mutation in the last 31 days lose access to that operation type. If your app loses access, then follow the steps below to enable it again.

## What to do

Check your app's access and enable the operation types that it runs:

1. From the Partner Dashboard, go to **Apps**, and then select your app.
2. In the sidebar, click **API access requests**.
3. Under **Run bulk operations**, click **Allow bulk queries**, **Allow bulk mutations**, or both. If an operation type is already enabled, then the section shows that it's enabled.

You don't need to change your app configuration, release a new app version, or ask merchants to reinstall your app. Access applies to every store that has your app installed.

For details, see [Enabling access to bulk operations](https://shopify.dev/docs/apps/build/apis/graphql-admin/bulk-operations/queries#enabling-access-to-bulk-operations).