Forum Discussion
Advocate IRoles needed for Dataverse shortcut from Fabric
Hello Luigia-Costabil
Microsoft documentation clearly states , "The account must have the system administrator permission to access data in Dataverse Managed Lake"Create a Dataverse shortcut - Microsoft Fabric | Microsoft Learn
So, regardless you choose to use an organisational account or a service principal, you will need a system administrator role for Dataverse shortcuts.
Q: Is System Administrator strictly required for Dataverse Shortcuts?
A: Yes
Q: Does Dataverse Managed Lake bypass the standard Dataverse security model?A: Yes, it does not allow fine grained permissions - an admin level access is a hard requirement.
Q: Can a custom role with Read permissions on the required tables be used successfully with a Service Principal?
A: No
Q: If not, is Link to Fabric the only recommended approach when following least-privilege principles?A: When you use Fabric Link, data is exposed into a Fabric Lakehouse + SQL endpoint, and access is governed by workspace/item permissions, not Dataverse roles. You choose this option when you have appropriate security design on your Fabric platform.
Super UserHello Luigia-Costabil
Microsoft documentation clearly states , "The account must have the system administrator permission to access data in Dataverse Managed Lake"
Create a Dataverse shortcut - Microsoft Fabric | Microsoft Learn
So, regardless you choose to use an organisational account or a service principal, you will need a system administrator role for Dataverse shortcuts.
Q: Is System Administrator strictly required for Dataverse Shortcuts?
A: Yes
Q: Does Dataverse Managed Lake bypass the standard Dataverse security model?
A: Yes, it does not allow fine grained permissions - an admin level access is a hard requirement.
Q: Can a custom role with Read permissions on the required tables be used successfully with a Service Principal?
A: No
Q: If not, is Link to Fabric the only recommended approach when following least-privilege principles?
A: When you use Fabric Link, data is exposed into a Fabric Lakehouse + SQL endpoint, and access is governed by workspace/item permissions, not Dataverse roles. You choose this option when you have appropriate security design on your Fabric platform.