topic Re: Dataverse Roles necessary for Fabric Shortcut in Data Engineering

Dataverse Roles necessary for Fabric Shortcut

Luigia-Costabil — Wed, 03 Jun 2026 19:13:22 GMT

Hi everyone,

I'm evaluating different options to integrate Dataverse with Microsoft Fabric and I'm looking for clarification regarding Dataverse Shortcuts and Service Principals.

According to the documentation, Dataverse Shortcuts support delegated authorization using either an Organizational Account or a Service Principal. However, I also found documentation stating that the account used to access Dataverse Managed Lake must have the System Administrator role.

My question is:

Has anyone successfully configured a Dataverse Shortcut using a Service Principal mapped to a Dataverse Application User with a custom security role (for example, a read-only role with access only to specific tables), instead of assigning the System Administrator role?

More specifically:

Is System Administrator strictly required for Dataverse Shortcuts?
Does Dataverse Managed Lake bypass the standard Dataverse security model?
Can a custom role with Read permissions on the required tables be used successfully with a Service Principal?
If not, is Link to Fabric the only recommended approach when following least-privilege principles?

I'd appreciate hearing about any real-world implementations or Microsoft guidance on this topic.

Thanks in advance!

Re: Dataverse Roles necessary for Fabric Shortcut

Murtaza_Ghafoor — Fri, 05 Jun 2026 11:59:15 GMT

@Luigia-Costabil
Based on Microsoft documentation and implementation experience, Dataverse Shortcuts accessing the Dataverse Managed Lake typically require the user or Service Principal (Application User) to have System Administrator privileges not less than that.
While Service Principals are supported for authentication, the Managed Lake does not appear to fully honor the standard Dataverse table-level security model. As a result, a custom read-only role with access to specific tables may not be enough.
If least privilege access is mandatory, Link to Fabric is generally the preferred approach, as access can be controlled within Fabric after the data is replicated to OneLake( unified storage).

I will also be interested to hear if anyone has successfully implemented Dataverse Shortcuts using a Service Principal with a custom security role instead of System Administrator.

If this helps, ✓ Mark as Kudos | Help Others

Re: Dataverse Roles necessary for Fabric Shortcut

v-aatheeque — Tue, 09 Jun 2026 05:39:15 GMT

Hi @Luigia-Costabil

We wanted to follow up to check if you’ve had an opportunity to review the previous responses. If you require further assistance, please don’t hesitate to let us know.

Re: Dataverse Roles necessary for Fabric Shortcut

v-aatheeque — Sat, 13 Jun 2026 07:31:27 GMT

Hi @Luigia-Costabil

Have you had a chance to look through the responses shared earlier? If anything is still unclear, we’ll be happy to provide additional support.