Forum Discussion
Lakehouse SQL endpoint access
Hi Manu002 ,
This behavior is expected in Microsoft Fabric. Currently, SQL Endpoints are shared at the workspace level, not per individual Lakehouse. That means if a user has access to the SQL Endpoint, they can query all Lakehouses within that workspace.
To manage access more granularly:
- Consider separating Lakehouses into different workspaces if isolation is required.
- Use row-level security (RLS) within the Lakehouse to restrict data access.
- Only admins can manage certain permissions like ReadData, so if you're just a member, you may not see or assign all access levels.
Hopefully, Microsoft will introduce more granular SQL Endpoint controls in future updates.
Hi Manu002 ,
Thank you for reaching out to us on the Microsoft Fabric Community Forum.
Thank you burakkaragoz for providing possible solution. SQL Endpoints are scoped at the workspace level, not at the individual Lakehouse level. So if a user has access to the workspace SQL Endpoint, they will be able to query all Lakehouses within that workspace.
To manage access more securely, create separate workspaces and Use Row-Level Security (RLS) to control data visibility within a shared Lakehouse.
If this post was helpful, please give us Kudos and consider marking Accept as solution to assist other members in finding it more easily
Hi Manu002 ,
Thanks for reaching out to the Microsoft fabric community forum.
I would also take a moment to thank burakkaragoz , for actively participating in the community forum and for the solutions you’ve been sharing in the community forum. Your contributions make a real difference.
I wanted to check if you had the opportunity to review the information provided. Please feel free to contact us if you have any further questions. If the response has addressed your query, please accept it as a solution so that other community members can find it easily.
Best Regards,
Menaka.
Community Support Team