Cannot view data in the Azure Cosmos DB Data Explorer in Chrome

Chad Lansford 20 Reputation points
2025-10-31T17:51:16.1366667+00:00

Using Chrome, I was previously able to view data in my Cosmos Databases using the Data Explorer in Azure. However, ever since the Azure outage on October 29th, 2025, the data never loads - it just spins. In the browser console, I can see that I'm getting the following error over and over again:

Access to fetch at 'https://[name-of-cosmos-db].documents.azure.com/' from origin 'https://cosmos.azure.com' has been blocked by CORS policy: Permission was denied for this request to access the unknown address space.

It is only affecting me in Chrome. The data loads fine using the Edge browser.

I've tried clearing my cookies/cache, restarting the browser, but nothing works.

Azure Cosmos DB
Azure Cosmos DB
An Azure NoSQL database service for app development.
{count} votes

Answer accepted by question author
  1. Chlanda, Patryk (ext) 85 Reputation points
    2025-11-05T10:09:53.8433333+00:00

    What you need to change in your Chrome browser (for other chromium browsers it's similar)

    -> got to chrome://flags/

    -> set the "Local Network Access Checks" flag (#local-network-access-check) to Disabled.

    What This Does

    This flag controls Chrome's Private Network Access (PNA) policy, which:

    • When Enabled (Default): Chrome blocks public websites (like https://cosmos.azure.com) from making requests to private/local network resources (like your CosmosDB endpoint https://<my_cosmos_account_name>.documents.azure.com/) without explicit permission
    • When Disabled : Chrome will no longer enforce these security restrictions, allowing the Azure Cosmos DB portal to access your database endpoint

    This was Chrome's PNA protection blocking the request. By disabling this check, Chrome will now allow the cross-network request to proceed.

    Important Notes

    ⚠️ You need to restart Chrome for this change to take effect

    ⚠️ Security Implications: Disabling this flag reduces browser security by allowing public websites to access private network resources. This is acceptable for development/testing, but be aware of the security trade-off.

    2 people found this answer helpful.

2 additional answers

Sort by: Most helpful
  1. Swapnesh Panchal 1,540 Reputation points Microsoft External Staff Moderator
    2025-10-31T22:15:02.03+00:00

    Hi Chad Lansford ,
    Welcome to the Microsoft Q&A and thank you for posting your query.

    You’re hitting a Chrome-specific security block, not a Cosmos DB outage. The message

    blocked by CORS policy: Permission was denied for this request to access the unknown address space

    comes from Chrome’s newer Private Network Access/CORS checks. Edge works because its network policies/extensions differ, so the service itself is fine.

    What usually fixes it:

    1. Update Chrome to the latest build. A recent Chrome update tightened PNA/CORS and a couple of builds caused false “unknown address space” blocks.
    2. Try a clean profile / Incognito with all extensions disabled. If it works there, re-enable extensions one by one (ad-blockers, privacy tools, password managers, recording tools often hook requests).
    3. Allow third-party cookies for these sites (Chrome → Settings → Privacy & security → Cookies):
      • portal.azure.com
      • cosmos.azure.com
      • login.microsoftonline.com / microsoftonline.com
    4. Clear site data just for cosmos.azure.com and *.documents.azure.com, then reload. Also flush DNS/sockets:
      • chrome://net-internals/#dns → “Clear host cache”
      • chrome://net-internals/#sockets → “Flush sockets”
    5. If you’re behind a corporate proxy/VPN/SSL inspection, ask IT to bypass inspection and any PAC rewrites for:
      • *.documents.azure.com
      • *.cosmos.azure.com Some proxies steer these to non-public ranges, which Chrome classifies as “unknown/private” and blocks.
    6. As a last resort for local testing only, temporarily relax the PNA block (managed devices may not allow this):
      • chrome://flags → “Block insecure private network requests” → Disabled → relaunch (re-enable after testing).

    Workarounds while you fix the browser:

    • Use Microsoft Edge (as you noted, it works).
    • Use a fresh Chrome profile with no extensions.

    If it still fails, capture one failing request in DevTools → Network and note: Chrome version, any proxy/agent in use, and whether the failing entry is a preflight (OPTIONS) blocked by the browser before it reaches *.documents.azure.com. That will confirm it’s a client/policy issue rather than Cosmos DB.

    1 person found this answer helpful.

  2. Joaquin Pretell ADM Internal 0 Reputation points
    2025-12-11T15:48:53.3633333+00:00

    Hello if this open i ahve the same problem with Microsoft Edge Version 143.0.3650.75 (Official build) (64-bit)


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.