Forum Discussion

EduardD's avatar
EduardD
Advocate III
9 months ago

Dataverse shortcut from Fabric

Hi there,  I wonder if anyone knows why this tenant setting is mandatory to enable Fabric Shortcut for Dataverse, are there any workaround not to use the settings (it represent security risk for the...
lakehouse
DaleT's avatar
DaleT
Resolver II
9 months ago

Hi, 

I have some ideas that aren't from the documentation. First, Fabric is a relatively independent platform. This setting provides an option to lock everything in. Second, The setting just provides some flexibililty. That's all. Even without it, that doesn't mean the external apps can access Fabric directly.

  • v-dineshya's avatar
    v-dineshya
    Community Support
    9 months ago

    Hi DaleT ,

    Fabric is designed as a relatively self-contained ecosystem, and this setting doesn’t open the floodgates for external apps to access everything. It simply permits the possibility for external apps to interact with OneLake data through approved APIs or connectors. Without it, those external integrations like Dataverse shortcuts fail because Fabric assumes a “closed garden” by default.

     

    Your interpretation that it’s about flexibility rather than exposure is spot-on. The risk only materializes if:

     

    1.External apps are granted permissions to OneLake items.

    2.RBAC and workspace security are misconfigured.

     

    So enabling the setting doesn’t bypass security it just removes the hard block. The actual access still depends on AAD roles, workspace permissions, and OneLake RBAC.

     

    Regards,

    Dinesh

    • EduardD's avatar
      EduardD
      Advocate III
      9 months ago

      Dinesh, thank you. it is not secure by design,
      1.  this enable option should be very granular and must be availalbe for specific worspace or lakehouse not for the whole tenant.

      2. more secure setting would assume both services to be part of the same vnet to have secure communications. 

       

      • v-dineshya's avatar
        v-dineshya
        Community Support
        9 months ago

        Hi EduardD ,

        Thank you for the update. We would recommend submitting your detailed feedback and ideas through Microsoft's official feedback channels, such as Microsoft Fabric Ideas. Feedback submitted through these channels is frequently reviewed by the product teams and can contribute to meaningful improvements.

        https://ideas.fabric.microsoft.com/ideas/search-ideas/ 

         

        Thank you for being a valued member in Microsoft Fabric Community Forum

        Regards,

        Dinesh