Shopify apps must enable bulk operations before running them

Shopify now requires apps to have access to bulk operations before they can run bulk queries or bulk mutations with the GraphQL Admin API. Starting today, an app that starts a bulk operation without that access receives an access denied error.

Bulk queries and bulk mutations are enabled separately. An app that runs bulkOperationRunQuery needs access to bulk queries, and an app that runs bulkOperationRunMutation needs access to bulk mutations. The requirement applies to all GraphQL Admin API versions.

The change affects public apps and custom apps that partners build and that run bulk operations. Apps that merchants create in the Shopify admin or the Dev Dashboard are not affected at this time. Apps that already run bulk operations already have access enabled, and partners can confirm this in the Partner Dashboard. Apps that have not run a bulk query or bulk mutation in the last 31 days lose access to that operation type and must enable it again.

Why it matters

Partner apps that depend on bulk operations will fail with access denied errors if they lack the right permission. Because access is set per operation type, an app that only runs queries still needs its own check. Confirming access before a failure reaches merchants avoids failed requests in production.

What to do

In the Partner Dashboard, go to Apps, select your app, and click API access requests in the sidebar. Under Run bulk operations, click Allow bulk queries, Allow bulk mutations, or both, for each type your app runs. You do not need to change app configuration, release a new version, or ask merchants to reinstall, because access applies to every store with the app installed. For details, see Shopify’s guide to enabling access to bulk operations.