How to block users before changing RLS/OLS in git repo TMDL models?

jaryszek — Thu, 21 May 2026 13:32:03 GMT

Hello,

line in the topic:
How to block users before changing RLS/OLS in git repo TMDL models?

If user will have Write permission or even build one and access to git repo...he can modify rls/ols settings within tmdl model.
What is the best practice to prevent that?

Best,
Jacek

Re: How to block users before changing RLS/OLS in git repo TMDL models?

v-sshirivolu — Fri, 22 May 2026 09:51:56 GMT

Hi @jaryszek ,
Thanks for reaching out Fabric Community Forum.

In Microsoft Fabric, access to modify semantic models is governed by workspace roles. Microsoft documentation states that workspace roles apply to all items in a workspace, and users assigned Contributor, Member, or Admin roles can modify content, while users assigned the Viewer role cannot modify content.

Microsoft Fabric Git integration documentation also states that actions such as committing workspace changes to Git or updating from Git require both workspace permissions and Git repository permissions. For example, committing changes requires Contributor permissions in the workspace together with the appropriate Git repository permissions.

The documentation further explains that Git operations are restricted based on the required workspace and Git permissions.

Based on the currently documented behavior, permission management for semantic model changes in Git-integrated workspaces is controlled through workspace roles together with Git repository permissions.

Please refer to the following Microsoft documentation:

Microsoft Fabric Permission Model:
https://learn.microsoft.com/en-us/fabric/security/permission-model

Git integration process in Microsoft Fabric:
https://learn.microsoft.com/en-us/fabric/cicd/git-integration/git-integration-process

Best Regards,
Sreeteja

topic Re: How to block users before changing RLS/OLS in git repo TMDL models? in Developer

How to block users before changing RLS/OLS in git repo TMDL models?

Re: How to block users before changing RLS/OLS in git repo TMDL models?