Forum Discussion

Bshin's avatar
Bshin
Frequent Visitor
1 year ago
Solved

Need to secure a table - thoughts on how?

Hey folks, I have a use case where we have some very secure data that only 3-4 users may have privilege to view (just Read). We cannot have anyone else in the organization/tenant view this table (all...
data warehouse
warehouse
  • nilendraFabric's avatar
    nilendraFabric
    1 year ago

    Hello Bshin 

     

    OneLake Data Access Roles provide folder-level access control within your lakehouse:

    1. Create a custom role for your sensitive data

    2. Assign this role to the specific folder containing your sensitive table

    3. Add only your 3-4 privileged users to this role

    4. Ensure these users aren't also assigned to the DefaultReader role (which grants access to all folders)



    https://data-mozart.com/understanding-data-access-options-in-microsoft-fabric/

     

     

    • Be aware that implementing RLS, OLS, or CLS on the SQL analytics endpoint will cause Power BI queries in Direct Lake mode to fall back to Direct Query mode

    • Users with write access (Admin, Member, Contributor roles) aren't restricted by OneLake data access roles - they retain full access to data in OneLake

    • For complete isolation, consider creating a separate workspace for this sensitive data, as OneLake data access roles currently only apply to users accessing OneLake directly