User Security Issues with Semantic Model From Mirrored Database

[ALMalecha]

We are using Fabric Mirrored Databases.   With the mirrored database, I have the SQL analytics endpoint.  In the endpoint, I've created a view. 

I created a semantic model over the view, called DocuSignData.   All of these artificats live in a workspace called analytics. 

I created a report over the DocuSignData semantics model, and published the report to a workspace called Division. 
My user has access to the Division workspace, has access to the report, and I gave him direct access to the DocuSignData semantics model in the Analytics workspace; he has Read, Build. 

He is able to open the report.  But he is not able to see the data.  For each visual, he sees

Does anyone know what is causing this, and why we would be able to open the report, and not see the data?  We were intentionally hoping to not give access to the mirrored database and SQL analytics endpoint - our users are not technical, and just want the report.  

Summary:
Analytics Workspace: Mirrored Database, SQL Analytics Endpoint, View, Docusign Semantic Model
Division Workspace: Report over Docusign Semantic Model
Users has access to Docusign Semantic Model, Division Workspace, and DocuSign Report. 

[v-prasare]

Hi @ALMalecha,

As we haven’t heard back from you, we wanted to kindly follow up to check if the solution provided for your issue worked? or let us know if you need any further assistance here?

Thanks,

Prashanth Are

MS Fabric community support

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly and give Kudos if helped you resolve your query

[v-prasare]

Hi @ALMalecha,

As we haven’t heard back from you, we wanted to kindly follow up to check if the solution provided for your issue worked? or let us know if you need any further assistance here?

Thanks,

Prashanth Are

MS Fabric community support

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly and give Kudos if helped you resolve your query

[v-prasare]

Hi @ALMalecha,

As we haven’t heard back from you, we wanted to kindly follow up to check if the solution provided for your issue worked? or let us know if you need any further assistance here?

Thanks,

Prashanth Are

MS Fabric community support

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly and give Kudos if helped you resolve your query

[v-prasare · Accepted solution]

Hi @ALMalecha,

This happens because mirrored databases do not yet fully support role-based security isolation, and semantic models built on them often require pass-through authentication or viewer access at the data source level — even if the user is not expected to access the database directly.

This means that users might need explicit permissions to access the mirrored data, even if they have access to the semantic model or reports built upon it: Please refer to below docs

https://learn.microsoft.com/en-us/fabric/database/mirrored-database/azure-sql-database-limitations

Thanks,

Prashanth Are

MS Fabric community support

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly and give Kudos if helped you resolve your query