--- title: Cosmos DB Mirroring in Fabric Now Supports Virtual... description: Cosmos DB mirroring in Microsoft Fabric now supports virtual network data gateways, letting accounts secured by private endpoints or virtual networks connect... canonical: https://daily.dev/posts/cosmos-db-mirroring-in-fabric-now-supports-virtual-network-data-gateways-qz74eceln twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Cosmos DB Mirroring in Fabric Now Supports Virtual Network Data Gateways | daily.dev og:description: Cosmos DB mirroring in Microsoft Fabric now supports virtual network data gateways, letting accounts secured by private endpoints or virtual networks connect... og:url: https://daily.dev/posts/cosmos-db-mirroring-in-fabric-now-supports-virtual-network-data-gateways-qz74eceln og:image: https://api.daily.dev/og/posts/qZ74eCEln.png og:image:alt: Cosmos DB Mirroring in Fabric Now Supports Virtual Network Data Gateways og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Cosmos DB Mirroring in Fabric Now Supports Virtual Network Data Gateways **[DevBlogs](https://daily.dev/sources/devblogs)** · 5 min read · 0 upvotes · 0 comments ## Summary Cosmos DB mirroring in Microsoft Fabric now supports virtual network data gateways, letting accounts secured by private endpoints or virtual networks connect without opening firewall IP ranges. Previously, setup required temporarily adding DataFactory and Power Query Online IP ranges to the Cosmos DB firewall; now connectivity stays entirely within the customer's own virtual network via a dedicated delegated subnet. Benefits include keeping public network access disabled throughout setup, one-time onboarding regardless of future container changes, and connectivity scoped to the customer's own subnet rather than Microsoft service tag ranges. Limitations include: mirrored databases must be created via the Fabric REST API since the portal UI doesn't yet support virtual network connections, existing mirrored databases must be re-created to adopt this model, only OAuth authentication is supported (not account keys), and a dedicated /27 or larger delegated subnet is required. Setup involves eight configuration steps covering resource provider registration, subnet creation, permissions, and gateway creation. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How do I connect a private-endpoint-secured Azure Cosmos DB account to Microsoft Fabric mirroring without opening firewall IP ranges? Use a virtual network data gateway, now supported for Cosmos DB mirroring in Microsoft Fabric. Provision the gateway into a dedicated delegated subnet (Microsoft.PowerPlatform/vnetaccesslinks, /27 or larger) in your own virtual network, enable EnableFabricNetworkAclBypass on the account, authorize the Fabric workspace as a trusted resource, then create the mirrored database via the Fabric REST API. Public network access stays disabled throughout. _Teams securing Cosmos DB behind private networks can track Fabric mirroring changes like this on daily.dev._ ### What are the limitations of using a virtual network data gateway for Azure Cosmos DB mirroring in Fabric? Mirrored databases must be created through the Fabric REST API since the New mirrored Azure Cosmos DB portal experience only lists Cloud connections, not virtual network ones. Existing mirrored databases can't bind to a virtual network connection and must be re-created. Only OAuth authentication is supported, not account keys, and the gateway requires its own dedicated subnet with outbound access to Microsoft Entra ID. _Engineers planning this migration can follow Cosmos DB and Fabric changes on daily.dev before rebuilding mirrored databases._ ## Similar posts on daily.dev - [Public Preview: Cosmos DB Mirroring in Microsoft Fabric with Private Endpoints](https://daily.dev/posts/public-preview-cosmos-db-mirroring-in-microsoft-fabric-with-private-endpoints-nx3sclibl) · DevBlogs · 0 upvotes · 0 comments - [Announcing Public Preview for Azure Cosmos DB in Fabric Database Hub\!](https://daily.dev/posts/announcing-public-preview-for-azure-cosmos-db-in-fabric-database-hub--q3f9d7jz6) · DevBlogs · 1 upvotes · 0 comments --- Tags: [#backend](https://daily.dev/tags/backend), [#azure-cosmos-db](https://daily.dev/tags/azure-cosmos-db), [#microsoft-fabric](https://daily.dev/tags/microsoft-fabric) [View this post on daily.dev](https://daily.dev/posts/cosmos-db-mirroring-in-fabric-now-supports-virtual-network-data-gateways-qz74eceln) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Cosmos DB Mirroring in Fabric Now Supports Virtual Network Data Gateways","url":"https://daily.dev/posts/cosmos-db-mirroring-in-fabric-now-supports-virtual-network-data-gateways-qz74eceln","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/cosmos-db-mirroring-in-fabric-now-supports-virtual-network-data-gateways-qz74eceln"},"datePublished":"2026-09-30T14:56:27.865Z","dateModified":"2026-09-30T14:56:57.809Z","description":"Cosmos DB mirroring in Microsoft Fabric now supports virtual network data gateways, letting accounts secured by private endpoints or virtual networks connect...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/cb4c0398d76846f34661bbbcddf95e04?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/cb4c0398d76846f34661bbbcddf95e04?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"DevBlogs","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"DevBlogs","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/8f68b453325f482ebeb73fb780092713","url":"https://daily.dev/sources/devblogs"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/cosmos-db-mirroring-in-fabric-now-supports-virtual-network-data-gateways-qz74eceln","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"backend,azure-cosmos-db,microsoft-fabric","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"DevBlogs","item":"https://daily.dev/sources/devblogs"},{"@type":"ListItem","position":3,"name":"Cosmos DB Mirroring in Fabric Now Supports Virtual Network Data Gateways"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/cosmos-db-mirroring-in-fabric-now-supports-virtual-network-data-gateways-qz74eceln#faq","mainEntity":[{"@type":"Question","name":"How do I connect a private-endpoint-secured Azure Cosmos DB account to Microsoft Fabric mirroring without opening firewall IP ranges?","acceptedAnswer":{"@type":"Answer","text":"Use a virtual network data gateway, now supported for Cosmos DB mirroring in Microsoft Fabric. Provision the gateway into a dedicated delegated subnet (Microsoft.PowerPlatform/vnetaccesslinks, /27 or larger) in your own virtual network, enable EnableFabricNetworkAclBypass on the account, authorize the Fabric workspace as a trusted resource, then create the mirrored database via the Fabric REST API. Public network access stays disabled throughout. Teams securing Cosmos DB behind private networks can track Fabric mirroring changes like this on daily.dev."}},{"@type":"Question","name":"What are the limitations of using a virtual network data gateway for Azure Cosmos DB mirroring in Fabric?","acceptedAnswer":{"@type":"Answer","text":"Mirrored databases must be created through the Fabric REST API since the New mirrored Azure Cosmos DB portal experience only lists Cloud connections, not virtual network ones. Existing mirrored databases can't bind to a virtual network connection and must be re-created. Only OAuth authentication is supported, not account keys, and the gateway requires its own dedicated subnet with outbound access to Microsoft Entra ID. Engineers planning this migration can follow Cosmos DB and Fabric changes on daily.dev before rebuilding mirrored databases."}}]} ```