Forum Discussion
OneLake Security Errors. Security Sync and SQL Query InternalError.
Thank you for reaching out to the Microsoft Fabric community forum.
The error occurs because OneLake shortcuts use a passthrough security model, meaning the security roles applied in the source Lakehouse must synchronize to the target Lakehouse shortcut and SQL endpoint. If the security sync does not complete successfully, the shortcut will not reflect the correct permissions, which can result in security sync failures and SQL InternalError. As explained in the Microsoft documentation and Fabric blog, shortcut access is always controlled from the source Lakehouse, and the SQL endpoint depends on the security sync service to validate access: https://learn.microsoft.com/en-us/fabric/onelake/security/get-started-onelake-security https://blog.fabric.microsoft.com/en-us/blog/understanding-onelake-security-with-shortcuts/
To resolve this, please open the target Lakehouse SQL endpoint and click Metadatasync, then refresh after a few minutes. Also ensure the OneLake security role is applied at the table level in the source Lakehouse, and recreate the shortcut if it was created before applying security. Verify the user has both the required workspace role and OneLake security role permissions, as shortcut access is governed by source permissions.
If you have any further questions, feel free to reach out and we'll be glad to assist.
Regards,
Microsoft Fabric Community Support Team.