Fabric specific warehouse element security

[TheoGaziaux]

Hi experts,

In the context of a reporting based on D365 Finance & Operations, I would like to define specific security mechanisms in order to handle multi-company data. For example, I would like to create groups of users that could only access certains views that exist in my datawarehouse.

In Fabric, I have a Fabric capacity workspace in which a lakehouse is synchronized witn raw tables coming from D365 and a datawarehouse in which I am creating views via SQL queries based on the lakehouse.

When I execute the following SQL query in the datawarehouse :

I can see that my test user call only access the view 'VIEW_Sales':

However, when I try to connect a PBI report to the SQL endpoint with this user, the credentials are not valid:

On the other hand, if I add this user as a viewer in the Fabric workspace, then all data can be seen, which is not what I want:

Do you know where is the issue here? Is there anything I am doing wrong?

Thank you!

[v-prasare]

@TheoGaziaux, As we haven’t heard back from you, we wanted to kindly follow up to check if the solution provided our super users worked? or let us know if you need any further assistance here?

Thanks,

Prashanth Are

MS Fabric community support

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly and give Kudos if helped you resolve your query

[TheoGaziaux]

Hi @v-prasare,

Thank you for your feedback!

However, I do not wish to share finished reports in the service with the users but constructed SQL views. Indeed, they will need to be able to create their own reports based on those.

Do you have any idea to solve this issue?

Thank you, 

Best regards,

Théo Gaziaux

[v-prasare · Accepted solution]

@TheoGaziaux,

please refer to below documentation where workspace, item permissions and other points are explained with examples and let me know if this helps?

Permission model - Microsoft Fabric | Microsoft Learn

Thanks,

Prashanth Are

MS Fabric community support

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly and give Kudos if helped you resolve your query

[v-prasare]

@TheoGaziaux, Thanks for reaching MS fabric community support

since, your facing issue with PowerBI report sharing Instead of relying on SQL-level security, you can Use Row-Level Security (RLS) in Power BI
Import the data into Power BI. Define Row-Level Security (RLS) in Power BI based on user roles. Assign users to RLS roles within Power BI Service.

This prevents unauthorized users from accessing data outside their allowed scope.

Thanks,

Prashanth Are