TL;DR
Microsoft Rayfin is an open source tool that builds an app’s backend and deploys it straight onto Microsoft Fabric. One command sets up the database, login system, and API together. The app’s data lands in OneLake right away, with no separate step to move it into analytics. Rayfin is still in preview, so Microsoft has not set a launch date yet. It only makes sense for teams already using Fabric as their data platform.
Every enterprise chasing AI-generated software hits the same wall. A coding agent can scaffold a working frontend in an afternoon, but the backend, the database, the authentication, the access policies, still has to be stitched together by hand and reconciled with governance after the fact. Microsoft’s answer, announced at Build 2026, is Microsoft Rayfin , an open-source SDK and CLI that lets developers and coding agents define a full application backend in code and deploy it straight onto Microsoft Fabric.
Instead of a database that needs an ETL pipeline before it reaches analytics, the app’s data lands in OneLake the moment it’s written. Rayfin is still in public preview, not generally available, and that status shapes almost every decision covered here. This guide walks through what Rayfin actually does, what it costs, how it compares to alternatives, and where it fits inside an existing Fabric estate.
Key Takeaways Microsoft Rayfin is an open-source SDK and CLI, announced at Microsoft Build 2026, for deploying application backends directly onto Microsoft Fabric. One command provisions a TypeScript-defined database, authentication, GraphQL API, and hosting, and app writes land in OneLake immediately. Rayfin entered public preview on June 2, 2026, and Microsoft has not announced a general availability date. Rayfin has no separate pricing tier. It consumes Capacity Units from whatever Fabric capacity the workspace already has. Rayfin apps inherit Fabric’s existing role-based access control, sensitivity labels, and Purview policies automatically. Kanerika’s Microsoft Fabric practice is evaluating Rayfin for clients building new applications on an existing, governed Fabric estate.
Building on Microsoft Fabric in 2026? Kanerika is a Microsoft Fabric Featured Partner that covers implementation, migration, and governance across the full Fabric stack.
Book a Meeting
What Is Microsoft Rayfin? Microsoft Rayfin is an open-source SDK and command-line interface for building an application backend and deploying it directly to Microsoft Fabric . A developer defines the data model, business logic, and access policies in TypeScript, then runs the Rayfin CLI to provision that backend on Fabric in one step.
The core capabilities don’t vary by project. A SQL database, authentication, a generated API layer, storage, and hosting all provision together as one unit, a deliberate departure from the assemble-it-yourself model most backend platforms still expect. Microsoft’s own GitHub repository puts it plainly: backend-as-a-service with built-in auth and data.
Rayfin is still in public preview, announced at Microsoft Build on June 2, 2026. That status is worth holding onto through the rest of this guide, starting with the first source of confusion: how Rayfin actually relates to the similarly named Fabric Apps.
Source: Microsoft How Microsoft Rayfin Works A Rayfin project moves through a fixed sequence, from code to a running backend on Fabric.
1. Defining the App in Code A Rayfin project starts with a data model written in TypeScript, using decorators to define entities, relationships, and access rules. Business logic and API behavior live in the same codebase, version-controlled through the GitHub-based workflow Microsoft built the launch around .
2. Deploying With the Rayfin CLI Scaffolding a new project runs through npm create @microsoft/rayfin@latest, and deployment runs through npx rayfin up, the same two commands Microsoft’s CLI reference walks through end to end. That single command also handles every later schema or frontend update, so shipping a change doesn’t require a separate release process from building it.
3. What Microsoft Fabric Provisions A deployed Rayfin app gets a Fabric SQL database, Microsoft Entra ID authentication , a generated GraphQL API, and static content hosting, all inside the customer’s own Fabric workspace. These generate automatically from the TypeScript data model, not configured as separate services one at a time.
4. Connecting Applications to OneLake Every write to the Fabric SQL database lands in OneLake without a separate pipeline. Power BI semantic models, Fabric notebooks, and Fabric data agents read that same data immediately, which is the actual structural difference from a standalone backend sitting outside the data estate.
That direct line into OneLake is also where the confusion starts. Ask five people what “Fabric Apps” means and expect at least three different answers.
Microsoft Rayfin vs Fabric Apps “Fabric Apps” and “Rayfin” name two different things that ship together, and Microsoft’s own materials don’t always draw the line clearly. Rayfin is the open-source SDK and CLI a developer runs locally to define and deploy an application. Fabric Apps is the managed execution environment inside a Fabric tenant that actually runs it, itself currently in public preview.
The confusion runs deeper than most explainers admit. At least three other, unrelated capabilities used the “Fabric Apps” name before this preview existed: translytical task flows for write-back inside Power BI reports, Power Apps on OneLake through Dataverse virtual tables, and the Extensibility Toolkit for ISV-built workloads. All three were already generally available.
For a practitioner, the working rule is simple. Rayfin is the tool a developer or coding agent touches directly. Fabric Apps, in the context of this preview, is where that output actually runs.
Governance and Data Management in Rayfin A Rayfin app doesn’t get its own separate security model. It inherits whatever governance already exists on the Fabric tenant it deploys into.
1. Role-Based Access Control Every child service Rayfin provisions, the database, the API, the hosted frontend, is a distinct artifact inside the Fabric workspace, subject to that workspace’s existing RBAC rules. That’s architectural, not something configured after the fact. Access follows the workspace, not the app, which one detailed technical breakdown confirms holds even at the child-service level.
2. Sensitivity Labels Data written through a Rayfin app carries whatever sensitivity labeling the organization already applies across its Fabric estate. A Rayfin-built application handling regulated data doesn’t need a separate classification pass. It inherits the same labels Power BI reports and Lakehouses already use.
3. Microsoft Purview Purview policies apply to Rayfin-provisioned data the same way they apply to any other Fabric-native asset, since the data never leaves the tenant. That inheritance is only as strong as the governance already in place before the app gets built, which is the part most “governed by default” pitches leave out.
What Does Microsoft Rayfin Cost? Rayfin has no pricing tier of its own, which is easy to misread as free. A deployed app draws Capacity Units from whatever Fabric capacity is already assigned to the workspace, the same pool that runs Warehouses, Lakehouses, and Notebooks, and Microsoft’s pricing documentation is explicit there’s no separate billing line.
The conversion rate is fixed. One Fabric CU equals 0.383 SQL database vCores, and every GraphQL query or mutation the app makes bills at 10 CUs per hour of request and response processing time. Microsoft recommends F4 capacity for development and F32 or higher for production, a threshold independent cost analysis treats as a hard floor, not a suggestion.
As an illustrative example, an internal app running a modest 50 hours of combined GraphQL processing time in a month would draw roughly 500 CUs, before SQL storage and compute get counted separately. That’s additive to whatever the organization already spends on Fabric, not a new bill.
One licensing detail is still genuinely unsettled. Below F64 capacity, users viewing a deployed app typically still need Power BI Pro licenses, and at F64 and above that requirement may not apply. One technical analysis calls this exact behavior undocumented and worth testing against a live tenant, and that’s the right instinct until Microsoft closes the gap in writing.
Source: Microsoft Fabric Microsoft Rayfin vs the Alternatives 1. Rayfin vs a Traditional Custom Backend A traditional backend means provisioning a database, building authentication, developing an API layer, and standing up hosting as separate, individually maintained pieces. Rayfin collapses that into one deployment, at the cost of being locked to Fabric as the runtime.
2. Rayfin vs Supabase and Firebase Supabase runs on PostgreSQL, with Row Level Security enforced natively at the database layer, and it can be self-hosted. Firebase runs on Firestore, a schemaless NoSQL document store, and only added a SQL option, Firebase Data Connect, in 2024, years after Supabase built its entire pitch around SQL from day one. A detailed 2026 platform comparison still treats that gap as the defining split between the two.
Neither platform has a native path into a broader governed analytics estate. A Supabase or Firebase app’s data stays inside that platform unless a team builds its own pipeline out. That’s the actual gap Rayfin closes, not raw feature parity, but where the data ends up living.
Table 1: Rayfin vs Custom Backend vs Supabase vs Firebase
Area Custom Backend Supabase Firebase Rayfin on Fabric Database Self-managed PostgreSQL Firestore (NoSQL) Fabric SQL database Authentication Built by hand Supabase Auth Firebase Auth Microsoft Entra ID API layer Developed manually Auto-generated REST/GraphQL Client SDKs Generated GraphQL Runs on Own infrastructure Supabase’s platform (or self-hosted) Google Cloud The org’s own Fabric tenant Native analytics access None Not built in Not built in Direct, via OneLake Governance Configured separately Row Level Security (Postgres) Firebase security rules Inherited from the Fabric tenant
Every alternative here manages authentication and a database competently. Only one of them puts that data inside a platform the organization already governs for analytics, and that’s the entire argument for choosing it.
Source: Microsoft Fabric Where Microsoft Rayfin Fits in the Application Stack 1. AI-Native Applications An AI agent reading from OneLake gets the current state of the business, not a snapshot from an overnight pipeline run. That immediacy is the reason Rayfin was built with coding agents as a primary user from the start, not a capability bolted on afterward.
2. Data-Driven Business Applications Applications that genuinely need operational and historical data in the same view benefit most, since that’s the exact seam Rayfin removes. A dashboard combining live transaction data with a year of historical trends no longer needs two separate systems reconciled after the fact.
3. Internal Enterprise Applications Workflow apps, operations dashboards, and employee-facing tools are the cleanest fit right now. The payoff of skipping an ETL pipeline is immediate, and the audience is already inside the organization’s existing Entra tenant.
4. Rapid Prototyping to Production A prototype built through Replit or GitHub Copilot can move to a governed production environment through the same deployment that built it, no separate hardening project required. Replit’s own framing at launch was blunt: agents write the code, Fabric ships it. That’s a real division of labor, since the backend Rayfin generates has to be production-grade the moment an agent deploys it, with no human reviewing the auth config in between.
Before You Build With Microsoft Rayfin 1. Preview Status and Product Maturity Rayfin and Fabric Apps are both in public preview, not generally available, and multiple independent technical reviews are blunt that mission-critical workloads shouldn’t run on it yet. CLI commands, TypeScript decorators, and pricing are all still subject to change before GA. That’s not a reason to ignore Rayfin. It’s a reason to build the pilot somewhere that can tolerate breakage.
2. Fabric Dependencies Rayfin only makes sense for organizations already committed to Fabric as their data platform . A team without that foundation would be adopting an entire platform dependency just to get a faster backend, which inverts the actual value proposition.
3. Technical Requirements and Learning Curve A backend defined through TypeScript decorators is fast to provision but assumes real comfort with that pattern. A team standardized on a different stack will spend genuine time on the learning curve before Rayfin’s speed advantage shows up in practice.
4. Who Owns Security and Governance Here Inherited governance is not the same as automatic governance. Someone still has to own whether the workspace’s existing RBAC and sensitivity labels are actually right for what a new application exposes, since Rayfin extends whatever policy already exists. It doesn’t audit it first.
Microsoft Fabric Architecture: What Teams Need to Know in 2026 Microsoft Fabric architecture unifies analytics, data engineering, and governance in one platform. Learn its core components, security model.
Learn More
How Kanerika Evaluates Rayfin for Clients Already Running Fabric Kanerika holds Microsoft Fabric Featured Partner status and has been one of the earliest Microsoft Purview implementers globally, depth that carries real weight once an application’s governance has to hold up to the same scrutiny as its analytics. That combination is the lens Kanerika’s Fabric practice applies to Rayfin.
The evaluation starts with a basic filter. Does the client already run Fabric as its data platform, or would adopting Rayfin mean adopting an entire new platform dependency just to get a faster backend? For clients past that filter, the assessment turns on whether the application’s data needs and access policies genuinely benefit from sitting inside the same OneLake estate as everything else, or whether a standalone backend is still the more direct fit.
Given Rayfin’s current preview status, Kanerika isn’t recommending it yet for mission-critical production workloads. It’s being evaluated now, against real client Fabric estates, so the assessment isn’t starting from zero once general availability lands.
Unifying Six Operational Systems for FoodPharma on Microsoft Fabric Challenge FoodPharma, a functional food manufacturer in Santa Fe Springs, California, ran six disconnected systems, NetSuite, RedZone, Parity Factory, UpKeep, Paychex, and Outlook. Every cross-functional report meant reconciling all six by hand, and a plant manager chasing a yield issue could wait two days for an answer.
Solution Kanerika moved the six systems into Microsoft Fabric , consolidating over 50 tables and roughly a terabyte of historical data into OneLake with automated daily refreshes. Power BI became the one place to build reports and query operational data directly.
“We set out to solve a specific operational problem, FoodPharma’s teams were spending too much time assembling data instead of using it,” said Amit Chandak, Chief Analytics Officer at Kanerika. “Microsoft Fabric made it possible to build a foundation that handles the assembly automatically. Everything else followed from that.”
Results Reporting time dropped from two business days to about 90 minutes, a 32x turnaround The BI team recovered roughly 15 hours a week of manual reconciliation A yield question that took two days now gets answered by mid-morning
Conclusion Microsoft Rayfin closes a real gap between AI-generated frontends and the governed backend infrastructure enterprise applications need. Deploying directly onto Fabric removes the ETL pipeline that normally separates operational apps from analytics, and inherited RBAC, sensitivity labels, and Purview policies mean governance doesn’t get bolted on later. It’s still public preview, not GA, with real gaps in connectors and undocumented licensing edges. For organizations already running Fabric as their data platform, though, it changes what standing up a new internal application actually requires.
Get Your Fabric Data Estate Production-Ready Before You Build On It. Kanerika’s FLIP accelerator compresses Fabric migrations to approximately 90 days, with governance and OneLake structure configured from day one.
See Our Microsoft Fabric Services
FAQs
Is Microsoft Rayfin generally available? No. Rayfin and the Fabric Apps preview both launched at Microsoft Build 2026 on June 2, 2026, and remain in public preview. Microsoft hasn’t announced a GA date. CLI commands, TypeScript decorators, and pricing are all documented as subject to change before general availability, so production-critical workloads should wait.
What does Microsoft Rayfin cost to run? Rayfin has no separate pricing tier. It draws Capacity Units from the Fabric capacity already assigned to the workspace, at a fixed rate of 10 CUs per hour of GraphQL processing time, with SQL storage and compute billed separately at 0.383 vCores per CU.
Is Fabric Apps the same thing as Rayfin? Not exactly. Rayfin is the open-source SDK and CLI a developer runs to define and deploy an app. Fabric Apps is the managed environment inside a Fabric tenant where that app actually runs. The two names get used almost interchangeably, which causes real confusion.
What authentication does a Rayfin app use in production? Microsoft Entra ID is the exclusive authentication method for a Rayfin app once deployed to Fabric. Local development supports an email and password fallback for testing without a live deployment, but production apps run entirely on the organization’s existing Entra tenant identity.
Can I try Rayfin without deploying to Microsoft Fabric? Yes, in a limited way. Rayfin supports a local, offline development experience with no cloud resources required, which Microsoft describes as experimental. It’s useful for evaluating the developer workflow, but the governance and OneLake integration that make Rayfin distinct only apply once deployed.
Do Rayfin app users need Power BI Pro licenses? Below F64 Fabric capacity, viewers typically still need Power BI Pro licenses. At F64 and above, that requirement may not apply, though this specific behavior isn’t fully documented by Microsoft yet, so it’s worth confirming directly against a tenant before budgeting around it.
How is Rayfin different from Supabase or Firebase? Supabase and Firebase are strong, mature backend-as-a-service platforms, but both run on their own infrastructure, disconnected from any broader analytics platform. Rayfin’s entire premise is deploying inside a Fabric tenant an organization already governs, so app data reaches Power BI and AI agents without a separate pipeline.
Which regions support Microsoft Rayfin today? Rayfin’s underlying Fabric Apps preview isn’t available in every Azure region yet. Microsoft currently recommends West US 2 or North Central US for new capacity, per the Fabric Community’s own Rayfin AMA, with broader regional support expected to expand as the preview matures.
