Tools2 min read

Shopify changes bulk-operation access: check infrequent exports

Since November 6, partner-built Shopify apps need separate bulk-query and bulk-mutation access. What store owners should check after a long pause.

Prepared by the NADALI editorial team using AI

Conceptual AI illustration: two streams of product cards pass through separate golden gates marked with download and editing symbols.
Надалі / Nadali — концептуальна ілюстрація, згенерована за допомогою OpenAI / conceptual illustration generated with OpenAI. · Original AI-generated editorial illustration for Nadali; no third-party reference assets. Use subject to applicable OpenAI terms and law; no exclusive copyright guarantee. · 1440 × 960

Author: Nadali. Prepared using AI.

On November 6, 2026, Shopify introduced separate access for partner-built apps to read and change data in bulk through the GraphQL Admin API. Starting an operation without the required access returns an access-denied error.

Who should care

Store owners using these integrations to obtain analytics data or update a catalog. This is a data-access change, not a new AI feature. When preparing data for AI analysis, distinguish an empty result from an operation that never started.

Availability and limits

Shopify’s documentation covers public and custom apps created by a Partner. Apps merchants create in Shopify admin or the Dev Dashboard are currently excluded.

Bulk-query and bulk-mutation permissions are separate. If an app has not started a particular operation type within the last 31 days, access to that type needs enabling again. Regular reading does not replace checking permission for bulk changes.

Before the next run

Our editorial recommendations:

  1. Ask the integration provider whether it uses these specific bulk operations. Do not assume every store export is affected.
  2. Add an access check to preparation for infrequent or seasonal jobs. Distinguish access denial, unfinished work and a successfully empty result in the log.
  3. Have the Partner check the required permission type in the Partner Dashboard. Do not grant write access merely to export data.
  4. After successfully obtaining a file, check its completeness and date. For catalog work, use our product-variant audit workflow.

Shopify says access has already been enabled for existing bulk operations; the change applies across GraphQL Admin API versions. Enabling it does not require merchants to reinstall the app or a new app release.

Takeaway: before an infrequent import or export, check the specific integration’s access rather than treating a failed start as evidence that data is absent.

Sources checked November 8, 2026. Nadali has not tested a store or integration. The cover is a conceptual AI illustration, not a Shopify interface. 

Sources and verification

  1. Apps must enable bulk operations before use ↗
    Source checked: 2026-11-08
  2. Perform bulk operations with the GraphQL Admin API ↗
    Source checked: 2026-11-08