Forum Discussion

TheoGaziaux's avatar
TheoGaziaux
New Member
1 year ago
Solved

Fabric specific warehouse element security

Hi experts,

 

In the context of a reporting based on D365 Finance & Operations, I would like to define specific security mechanisms in order to handle multi-company data. For example, I would like to create groups of users that could only access certains views that exist in my datawarehouse.

 

In Fabric, I have a Fabric capacity workspace in which a lakehouse is synchronized witn raw tables coming from D365 and a datawarehouse in which I am creating views via SQL queries based on the lakehouse.

 

When I execute the following SQL query in the datawarehouse :

 

I can see that my test user call only access the view 'VIEW_Sales':

 

However, when I try to connect a PBI report to the SQL endpoint with this user, the credentials are not valid:

On the other hand, if I add this user as a viewer in the Fabric workspace, then all data can be seen, which is not what I want:

 

Do you know where is the issue here? Is there anything I am doing wrong?

 

Thank you!

 

  • v-prasare's avatar
    v-prasare
    1 year ago

    TheoGaziaux,

     

    please refer to below documentation where workspace, item permissions and other points are explained with examples and let me know if this helps?

     

    Permission model - Microsoft Fabric | Microsoft Learn

     

     

     

     

    Thanks,

    Prashanth Are

    MS Fabric community support

     

    If this post helps, then please consider Accept it as the solution to help the other members find it more quickly and give Kudos if helped you resolve your query

     

     

     

4 Replies

  • v-prasare's avatar
    v-prasare
    Community Support

    TheoGaziaux, Thanks for reaching MS fabric community support

     

    since, your facing issue with PowerBI report sharing Instead of relying on SQL-level security, you can Use Row-Level Security (RLS) in Power BI
    Import the data into Power BI. Define Row-Level Security (RLS) in Power BI based on user roles. Assign users to RLS roles within Power BI Service.

     

    This prevents unauthorized users from accessing data outside their allowed scope.

     

    Thanks,

    Prashanth Are

     

  • Hi v-prasare,

     

    Thank you for your feedback!

     

    However, I do not wish to share finished reports in the service with the users but constructed SQL views. Indeed, they will need to be able to create their own reports based on those.

     

    Do you have any idea to solve this issue?

     

    Thank you, 

     

    Best regards,

     

    Théo Gaziaux

    • v-prasare's avatar
      v-prasare
      Community Support

      TheoGaziaux,

       

      please refer to below documentation where workspace, item permissions and other points are explained with examples and let me know if this helps?

       

      Permission model - Microsoft Fabric | Microsoft Learn

       

       

       

       

      Thanks,

      Prashanth Are

      MS Fabric community support

       

      If this post helps, then please consider Accept it as the solution to help the other members find it more quickly and give Kudos if helped you resolve your query

       

       

       

  • v-prasare's avatar
    v-prasare
    Community Support

    TheoGaziauxAs we haven’t heard back from you, we wanted to kindly follow up to check if the solution provided our super users worked? or let us know if you need any further assistance here?

     

     

    Thanks,

    Prashanth Are

    MS Fabric community support

     

    If this post helps, then please consider Accept it as the solution to help the other members find it more quickly and give Kudos if helped you resolve your query