Request for Enhanced RLS Support in Fabric SQL Endpoint
Dear Microsoft Fabric Product Team,
As part of our Tax Reporting MSRA Retirement initiative, we have successfully developed Semantic Models in Microsoft Fabric using FDL shortcut tables. We’ve applied Row Level Security (RLS) at the Semantic Model level to align with our internal data access policies.
We are now exploring ways to expose our Lakehouse SQL Endpoint to power users. However, we’ve encountered a limitation: RLS is currently supported only on Lakehouse tables. Our architecture heavily relies on shortcut tables, delta tables, and views, which do not currently support RLS enforcement at the SQL endpoint level.
This gap restricts our ability to maintain consistent data access controls across reporting layers. We would greatly appreciate:
- Support for RLS on shortcut tables and views within the Lakehouse SQL Endpoint.
- Guidance or examples from other teams who may have implemented similar access control strategies.
- Any roadmap updates regarding RLS expansion to non-native Lakehouse objects.
We believe this enhancement would significantly improve governance and flexibility for enterprise-grade reporting in Fabric.
Thank you for considering this request. We’re happy to provide additional context or collaborate on testing if needed.
Best regards,
Arif Sheikh
Senior Software Engineer
Microsoft
Recent ideas
Enable Ownership Change / Take‑Over for Mirrored Database Items in Fabric
Mirrored DBs do not support ownership transfer today. This becomes an issue when someone leaves the company. And the user tied to the ownership is beeing disabled. That means you need to recreate the...Sigurd3 hours agoNew MemberNew828Views22likes2CommentsAmazon Redshift Connector - Power query
Amazon Redshift is a supported connector within Power Query and supports Microsoft Entra ID (Azure AD) Single Sign-On (SSO) scenarios through Power BI Service and Power BI semantic models. Documentat...aashraysood3 hours agoMicrosoft EmployeeNew4Views0likes0CommentsAPI to check that Failure Notifications for Scheduled Pipeline Runs are correctly set up
Please create a GET API endpoint so that we can check whether users have been added to the Failure Notifications list for a scheduled pipeline. Instead of having to check this manually for each pipe...frithjof_v6 hours agoCommunity ChampionNew9Views0likes0Comments