Forum Discussion
Sql endpoint access and DB access roles HELP!
Hello Eye0nine ,
Using ALTER ROLE or GRANT in SQL Endpoint
Microsoft Fabric does not support ALTER ROLE in the SQL Endpoint. Unlike traditional SQL Server databases, role management in Fabric is handled through Microsoft Entra ID (formerly Azure AD) rather than SQL roles. However, you can use the GRANT statement to provide object-level permissions.
For 2nd question, no the default role is not configurable within Fabric SQL Endpoints. Permissions are controlled at the workspace level through Fabric roles:
- Admin, Member, Contributor, Viewer (Read-only access).
Also for the question you asked what is the Default Role:
- If a user does not have explicit permissions, their access is determined by their workspace role (e.g., Viewer role allows read-only access).
- Object-level access can be fine-tuned using GRANT for specific users.
To manage user permissions effectively, you may need to assign workspace-level roles in Microsoft Fabric and then use GRANT for additional fine-grained control.
If this post helps, then please give us Kudos and consider Accept it as a solution to help the other members find it more quickly.
Thank you.
Hi Eye0nine ,
Thanks for reaching out to the Microsoft fabric community forum.
As you wanted to assign users to a SQL security role in the Fabric SQL endpoint, assuming it would allow them to execute functions in Dataverse and view paginated reports. However, Microsoft does not support direct SQL logins or database user assignments in Fabric.
As paginated reports invoke functions within Dataverse, users may require higher access levels than just "Viewer" to execute these functions successfully.
Also please consider the following:
- Certain Dataverse functions might need elevated permissions beyond Viewer.
- Assign users to database roles via the Fabric UI rather than trying to create SQL-based roles.
- Grant the users with Contributor or Member access to the Fabric workspace.
- Using service principals or Power BI security groups for controlled access.
I hope my suggestions give you good ideas, if you need any further assistance, feel free to reach out.
If this post helps, then please give us Kudos and consider Accept it as a solution to help the other members find it more quickly.
Thank you.