topic Re: Row level access for Lakehouse tables in Data Engineering

Row level access for Lakehouse tables

amaaiia — Tue, 20 Feb 2024 08:00:05 GMT

Is it possible to create data access rules in a Lakehouse table that is going to be consumed by Power BI? If I have a table with user data with one of the columns user_id, which by architecture I need to be Lakehouse and not Warehouse, and I want that the user who enters the PBI report can only consult the data of his user, is there any way to restrict that access with data access rules in the Lakehouse table?

Re: Row level access for Lakehouse tables

v-cboorla-msft — Tue, 20 Feb 2024 10:10:05 GMT

Hi @amaaiia

Thanks for using Microsoft Fabric Community.

Yes, it is possible to create data access rules in Microsoft Fabric to restrict access to user data in a Lakehouse table consumed by Power BI. Please refer to the video that explains this topic in detail, including workarounds for limiting access to specific user data in Power BI reports. This video demonstrates a step-by-step approach to implementing data access rules, specifically addressing the use case you mentioned.

You can find it here: https://www.youtube.com/watch?v=MdmPjZAV9I8.

I hope this information helps. Please do let us know in case if you have any further questions.

Thanks.

Re: Row level access for Lakehouse tables

frithjof_v — Tue, 20 Feb 2024 23:01:18 GMT

Hi @amaaiia

I think you have some options:

If you want to use Import mode Power BI semantic model, you can set up the Row-Level Security (RLS) in the Import mode Power BI semantic model. For me, this would be the easiest way to implement RLS. This is the traditional way of setting up RLS in Power BI, and can be made simple or more complex.
Here are some videos which touch upon that: Guy in a Cube Radacad
And some blog posts: Static RLS Dynamic RLS

If you want to use Direct Lake mode Power BI semantic model, you can set up the Row-Level Security (RLS) using an external tool like Tabular Editor or SSMS. This is shown in this YouTube video and written about in this blog post. I think this will be possible to set up directly in Fabric (without external tool) in the future.

If you want to use DirectQuery mode (maybe not ideal for performance), you can set up Row-Level Security (RLS) in the SQL Analytics Endpoint. This is shown in a part of the YouTube video in the previous reply.

Re: Row level access for Lakehouse tables

v-cboorla-msft — Wed, 21 Feb 2024 11:10:31 GMT

Hi @amaaiia

Thanks.

Re: Row level access for Lakehouse tables

v-cboorla-msft — Thu, 22 Feb 2024 10:25:01 GMT

Hi @amaaiia

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others.
If you have any question relating to the current thread, please do let us know and we will try out best to help you.
In case if you have any other question on a different issue, we request you to open a new thread.

Thanks.

Re: Row level access for Lakehouse tables

amaaiia — Thu, 22 Feb 2024 10:54:22 GMT

I'm using DirectLake mode, as I've read this is just for DirectQuery mode. Is it an available solution integrated in Fabric for DirectLake mode?

Re: Row level access for Lakehouse tables

frithjof_v — Thu, 22 Feb 2024 11:24:43 GMT

If you want to use Direct Lake mode Power BI semantic model, you can set up the Row-Level Security (RLS) using an external tool like Tabular Editor or SSMS. This is shown in this YouTube video and written about in this blog post. I think this will be possible to set up directly in Fabric (without external tool) in the future.