Forum Discussion
Lakehouse Object Sharing onelake security role
Yes. There is no way to hide all data users through Lakehouse . Read all SQL End Point or Lakehouse is the last option in Microsoft Fabric Lakehouse. it is open source linux systems. For that, You need to work in Direct Lake Mode ( Power BI Desktop ) where there is a option of "Make changes to this model" and you can select/ deselect whatever you want. or there is an option of row level security in Power BI Service. Microsoft Fabric is a Unified Data where there is only one security at all.
- Option 1: Try provide SQL Endpoint access at lakehouse level
Option 2
- Create a view in warehouse , the underlying base table pointing to lakehouse tables.
- Provide granular level access only to the table itself.
- GRANT SELECT ON OBJECT::dbo.<view_name> TO [[email protected]];
The problem with this is granting access to the SQL analytics endpoint that way enables read on all objects in the lakehouse. I only want them to see and be able to query two objects.. I don't see the use of a onelake security role and sharing to two specific objects if I have to grant access to all objects via the sql endpoint for them to use the lakehouse. Scripting access defeats the purpose of the onelake security role, doesn't it? Hoping this isn't the only way.
Option 2 mentioned above in the thread will work for your case.