Forum Discussion
Dataverse shortcut from Fabric
Hi DaleT ,
Fabric is designed as a relatively self-contained ecosystem, and this setting doesn’t open the floodgates for external apps to access everything. It simply permits the possibility for external apps to interact with OneLake data through approved APIs or connectors. Without it, those external integrations like Dataverse shortcuts fail because Fabric assumes a “closed garden” by default.
Your interpretation that it’s about flexibility rather than exposure is spot-on. The risk only materializes if:
1.External apps are granted permissions to OneLake items.
2.RBAC and workspace security are misconfigured.
So enabling the setting doesn’t bypass security it just removes the hard block. The actual access still depends on AAD roles, workspace permissions, and OneLake RBAC.
Regards,
Dinesh
Dinesh, thank you. it is not secure by design,
1. this enable option should be very granular and must be availalbe for specific worspace or lakehouse not for the whole tenant.
2. more secure setting would assume both services to be part of the same vnet to have secure communications.
Hi EduardD ,
Thank you for the update. We would recommend submitting your detailed feedback and ideas through Microsoft's official feedback channels, such as Microsoft Fabric Ideas. Feedback submitted through these channels is frequently reviewed by the product teams and can contribute to meaningful improvements.
https://ideas.fabric.microsoft.com/ideas/search-ideas/
Thank you for being a valued member in Microsoft Fabric Community Forum
Regards,Dinesh
Hi EduardD ,
We haven’t heard from you on the last response and was just checking back to see , Could you please confirm if you've submitted this as an idea in the Ideas Forum? If so, sharing the link here would be helpful for other community members who may have similar feedback. Thank you for being part of the Microsoft Fabric Community.
Regards,
Dinesh