Microsoft Azure Private Link · Rate Limits

Microsoft Azure Private Link Rate Limits

Private Link operations are Azure Resource Manager control-plane calls against management.azure.com, so they inherit ARM throttling, not a product-specific quota. Two layers apply at once: the ARM gateway token bucket (per subscription, per service principal, per operation type, applied per region) and the Microsoft.Network resource provider's own per-subscription-per-region ceiling. Whichever empties first throttles the call. This file replaces a 2026-05-04 scaffold that carried invented free/pro/enterprise request quotas; none of those numbers came from Microsoft.

Microsoft Azure Private Link Rate Limits is the machine-readable rate-limit profile for Microsoft Azure Private Link on the APIs.io network, in the API Commons Rate Limits shape.

It captures 6 rate-limit definitions, measuring requests.

Limit state is signalled in the remaining, retryAfter, limit, and reset response headers, and an exhausted limit returns HTTP 429.

The profile also includes 4 backoff/retry policies defined and response codes documented for throttled and retryAfterUnit.

Tagged areas include Rate Limiting, Throttling, and Azure Resource Manager.

6 Limits Exhausted: HTTP 429 remainingretryAfterlimitreset
Transcribed from the provider's documentation on 2026-09-17 — learn.microsoft.com/en-us/azure/azure-resource-manager/ma....
View Source
Rate LimitingThrottlingAzure Resource Manager

Limits

ARM subscription reads per-subscription-per-service-principal-per-region
requests
ARM subscription writes per-subscription-per-service-principal-per-region
requests
ARM subscription deletes per-subscription-per-service-principal-per-region
requests
ARM tenant reads / writes / deletes per-tenant-per-region
requests
Tenant deletes and writes use bucket 200 / refill 10, matching the subscription shape. A global per-subscription ceiling equal to 15x the individual service-principal limit applies across all service principals.
Microsoft.Network resource provider read (GET) per-subscription-per-region
requests · 5 minutes
10000
The resource-provider ceiling that Private Link GET/LIST calls draw from. Applies on top of the ARM gateway bucket above.
Microsoft.Network resource provider write / delete (PUT, DELETE) per-subscription-per-region
requests · 5 minutes
1000
PrivateEndpoints_CreateOrUpdate, PrivateLinkServices_CreateOrUpdate and every Delete draw from this bucket.

Policies

Retry-After is authoritative
On a 429 the response carries Retry-After in seconds. Sending before it elapses is not processed and returns a fresh, longer retry value. Azure SDKs implement this automatically.
Free and trial subscriptions are lower
Microsoft states the documented buckets may be smaller for free or trial customers, without publishing the reduced numbers.
Background job throttling
ARM separately throttles platform background jobs; the symptom is "The request for subscription could not be processed due to an excessive volume of traffic". A caller has no control over it.
429 is not always a quota
Microsoft warns that some resource providers return 429 for transient overload or target-resource state, not for a quota the caller consumed.

Work with this as data

Every rate limit here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for rate limits

4 MCP tools reach this
  • find_rate_limitsBrowse and filter every rate limit in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This rate limit 
curl "https://apis.io/api/v1/rate-limits/microsoft-azure-private-link-rate-limits"
All rate limits 
curl "https://apis.io/api/v1/rate-limits?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.