Data Security and Tenant Admins in Fabric

[sean_cochran]

If a business wishes to store HIPAA-protected data in Fabric but the tenant admin does not need access to it (only a domain-specific team member needs access), how can that data be secured to comply with HIPAA requirements (eliminate unnecessary access)? Since tenant admins can access any workspace, managing access with workspaces isn't an option. Are there alternatives?

[v-saisrao-msft]

Hi @sean_cochran,

checking in to see if your issue has been resolved. If the response provided was helpful, kindly mark it as the solution so that others with the same issue can benefit.
let us know if you still need assistance.

Thank you.

[v-saisrao-msft]

Hi @sean_cochran,

I hope you had a chance to review the solution shared earlier. If it addressed your question, Consider accepting it as the solution it helps others find answers more quickly.
If you're still facing the issue, feel free to reply, and we’ll be happy to assist further.

Thank you.

[v-saisrao-msft]

Hi @sean_cochran,

Thanks @lbendlin,for your insights.

Below are the links that address your issue:

About tenant settings - Microsoft Fabric | Microsoft Learn - Clarifies that tenant settings serve as governance tools rather than security controls, and they do not restrict data access.

Permission model - Microsoft Fabric | Microsoft Learn - Describes that tenant and workspace admins have complete access, and clarifies that permissions cannot be used to limit their access.

If this post helps, then please consider Accept it as a solution to help the other members find it more quickly.

Thank you.

[lbendlin · Accepted solution]

There are no technical solutions for that. You would have to use contractual/legal methods that would penalize the tenant admins for abusing their access privileges.

[sean_cochran]

Thanks for the clear response!