In Ms fabric i want the user able to view data but cannot download it in fabric warehouse.

[Anonymous]

As the admin of a workspace in Microsoft Fabric, I want to configure permissions so that certain users can view data within the workspace but are restricted from downloading it. These users include those assigned both the Contributor and Viewer roles.

[Anonymous]

in fabric warehouse data how can i restrict from download it but can view or see the data 

[frithjof_v]

@Anonymous I don't think that is possible.

I'm curious why you want that?

If they can read the data, they can also download it.

[VenuBollineni]

Hi @Anonymous ,
Good Day!

To prevent users from downloading data, you should change their role from Contributor to Viewer. Contributors can view and modify all content in the workspace, so switching their role to Viewer will restrict their ability to download data. for further more info pls refer this doc Roles in workspaces in Power BI - Power BI | Microsoft Learn

Regards, 
VenuBollineni

[frithjof_v]

No.

A user with Viewer role can download the Warehouse data.

For example by using Power BI Desktop or SSMS.

[frithjof_v]

If a user has access to view the data in the Warehouse, they can download it.

They can use Power BI Desktop or some other tool to download the data.

Changing to Viewer will not stop that.

[Anonymous]

Hi @Anonymous ,

Contributor roles allow users to view and modify all content in the workspace. Therefore, in order to restrict users from downloading data, you need to consider changing the role assigned to them to Viewer.

For managing permissions, you can refer to the official documentation below:

Permission model - Microsoft Fabric | Microsoft Learn

Best Regards,
Yang
Community Support Team

If there is any post helps, then please consider Accept it as the solution  to help the other members find it more quickly.
If I misunderstand your needs or you still have problems on it, please feel free to let us know. Thanks a lot!

[Anonymous]

Hi @Yang

is it possible we could use custom role and allow contributors to only view data but cannot download data 

[VenuBollineni]

Hi @Anonymous 

Yes, it is possible to create a custom role in Microsoft Fabric that allows contributors to view data without being able to download it

1. Go to the Admin Portal.
2. Find Security Settings.
3. Create a New Role.
4. Set Permissions: Allow viewing data but block downloading or exporting.

Regards,
Venu Bollineni

[frithjof_v]

Hi,

I cannot find this option and I have never heard about it before.

Can you please show a screenshot or refer to documentation that tells about this feature?

I actually don't think this is possible.

[VenuBollineni]

Hi @frithjof_v ,

please refer to this post 

[frithjof_v]

Afaik, that setting does not exist anymore. Also, I don't think that setting would have prevented a Viewer from downloading data from a Warehouse.

These are the current Tenant settings that contain the word Export in the Admin portal in Fabric:

I don't think any of these settings will stop a Viewer from downloading data from a Warehouse.

In general, I don't think we can stop a Workspace Viewer from connecting to and downloading data from a Warehouse.

[VenuBollineni]

Hi @frithjof_v, @Anonymous 

Please check this 

2)

[frithjof_v]

That doesn't stop Viewers from downloading Warehouse data.

That feature only affects the ability to download .pbix files and paginated reports from the web service.

In general, I don't think we can stop a Workspace Viewer from connecting to and downloading data from a Warehouse.

[Anonymous]

Hi @VenuBollineni ,

Firstly, thank you for sharing your solution in the post! However, I noticed that I don’t have access to the **Tenant settings** in my Admin portal, even though I am an admin of a workspace.

Could you also please share a link or video where I can find a reference for this solution?

Thank you!

[VenuBollineni]

Hi @Anonymous,

It sounds like you might need higher-level admin privileges to access the Tenant settings. Here are some resources that might help you

About tenant settings - Microsoft Fabric | Microsoft Learn
Enable Microsoft Fabric for your organization - Microsoft Fabric | Microsoft Learn
fabric-docs/docs/admin/about-tenant-settings.md at main · MicrosoftDocs/fabric-docs · GitHub

Regards,
VenuBollineni

[frithjof_v]

To access the tenant settings, we need to have the Fabric Administrator role for the entire tenant.