Forum Discussion
How to block users before changing RLS/OLS in git repo TMDL models?
Hello,
line in the topic:
How to block users before changing RLS/OLS in git repo TMDL models?
If user will have Write permission or even build one and access to git repo...he can modify rls/ols settings within tmdl model.
What is the best practice to prevent that?
Best,
Jacek
Hi jaryszek ,
Thanks for reaching out Fabric Community Forum.
In Microsoft Fabric, access to modify semantic models is governed by workspace roles. Microsoft documentation states that workspace roles apply to all items in a workspace, and users assigned Contributor, Member, or Admin roles can modify content, while users assigned the Viewer role cannot modify content.Microsoft Fabric Git integration documentation also states that actions such as committing workspace changes to Git or updating from Git require both workspace permissions and Git repository permissions. For example, committing changes requires Contributor permissions in the workspace together with the appropriate Git repository permissions.
The documentation further explains that Git operations are restricted based on the required workspace and Git permissions.
Based on the currently documented behavior, permission management for semantic model changes in Git-integrated workspaces is controlled through workspace roles together with Git repository permissions.
Please refer to the following Microsoft documentation:
Microsoft Fabric Permission Model:
https://learn.microsoft.com/en-us/fabric/security/permission-modelGit integration process in Microsoft Fabric:
https://learn.microsoft.com/en-us/fabric/cicd/git-integration/git-integration-process
Best Regards,
Sreeteja
2 Replies
Hi jaryszek ,
Thanks for reaching out Fabric Community Forum.
In Microsoft Fabric, access to modify semantic models is governed by workspace roles. Microsoft documentation states that workspace roles apply to all items in a workspace, and users assigned Contributor, Member, or Admin roles can modify content, while users assigned the Viewer role cannot modify content.Microsoft Fabric Git integration documentation also states that actions such as committing workspace changes to Git or updating from Git require both workspace permissions and Git repository permissions. For example, committing changes requires Contributor permissions in the workspace together with the appropriate Git repository permissions.
The documentation further explains that Git operations are restricted based on the required workspace and Git permissions.
Based on the currently documented behavior, permission management for semantic model changes in Git-integrated workspaces is controlled through workspace roles together with Git repository permissions.
Please refer to the following Microsoft documentation:
Microsoft Fabric Permission Model:
https://learn.microsoft.com/en-us/fabric/security/permission-modelGit integration process in Microsoft Fabric:
https://learn.microsoft.com/en-us/fabric/cicd/git-integration/git-integration-process
Best Regards,
SreetejaHi jaryszek ,
I hope the above details help you fix the issue. If you still have any questions or need more help, feel free to reach out. We’re always here to support you