Manage OneLake data access feature in Lakehouse

[PriyaJha]

Hi,

I am admin in a workspace and was trying to provide access to a resource on specific folder of Lakehouse and hence tried using Manage OneLake data access (preview) feature.

I setup a role and assigned the resource to this role but the resource is not able to see anything in the workspace and is not able to access lakehouse to read contents of the folders.

Am i missing some property or configuration?

[v-veshwara-msft]

Hi @PriyaJha ,

Just following up on your issue. If the provided response has resolved your concern, please mark it as the Accepted Solution to help others with similar queries. If you need further assistance, feel free to reach out.

Thank you!

[v-veshwara-msft]

Hi @PriyaJha ,

Thank you for posting in the Microsoft Fabric Community.

Thanks, @nilendraFabric , for your valuable suggestions.

In addition to the steps suggested by @nilendraFabric , please ensure that the Lakehouse is shared with the intended user. You can do this by clicking on the "Share" button at the top right corner of the Lakehouse and granting the required permissions. This step is essential for enabling folder-specific access in OneLake.

For more details, please refer to the following documentation:
Data Access Control Model in OneLake (Public Preview) - Microsoft Fabric | Microsoft Learn
Get started with OneLake data access roles (preview) - Microsoft Fabric | Microsoft Learn

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly and a kudos would be appreciated.

Best Regards,
Vinay.

[nilendraFabric]

Hello @PriyaJha 

Users must have Read permission (not ReadAll) on the lakehouse item to adhere to custom role restrictions

Delete the `DefaultReader` role or revoke ReadAll permissions to enforce folder-specific access.
• Ensure no user is assigned to both `DefaultReader` and custom roles

If this is helpful please accept the answer