Forum Discussion
Super UserOneLake Security (Lakehouse): can’t find the RLS/CLS options
Hi everyone,
I’m trying to follow the OneLake Security docs for Row-level security in a Lakehouse.
In Lakehouse → Manage OneLake security (preview) I can create a role and add tables/folders, but I don’t see any option for “Row-level security (preview)” or “Column-level security” on the role/table (… menu).
I can't either found on the SQL Analytics Endpoint, the ruban on Security to set to User identity.
What I’ve already checked:
Lakehouse has schemas enabled.
- Tables are Delta/Parquet.
I’m an Admin/Contributor in the workspace.
Questions:
Is RLS/CLS still limited preview and gated per tenant? If so, how can I confirm whether my tenant is enrolled (and request access if not)?
Are there regional or capacity prerequisites that would hide the button?
Any other known limitations that would prevent the RLS/CLS option from showing in Lakehouse?
Doc :
https://learn.microsoft.com/en-us/fabric/onelake/security/row-level-security
Thanks !
Hi AntoineW,
Thank you for reaching out to the Microsoft Fabric Forum Community. and special thanks to suparnababu8 and spaceman127 for prompt and helpful responses.
Right now, the reason you don’t see the Row level/Column level security options in OneLake Lakehouse is likely because the feature is still in preview and not yet fully rolled out to all tenants/regions. To use it, a few things must be true, your Lakehouse security must be enabled, tables must be in Delta Parquet format, and the SQL Analytics Endpoint must be set to “User’s identity”. Also, Admin/Contributor roles always bypass RLS, so testing should be done with a Viewer role. If you’ve confirmed all this and still don’t see the option, it likely means your tenant hasn’t received the preview yet. The best step is to raise a support ticket with Microsoft Fabric to check whether your tenant/region is included in the rollout and, if not, request access.
OneLake Security for SQL analytics endpoints (Preview) - Microsoft Fabric | Microsoft Learn
Get started with OneLake security (preview) - Microsoft Fabric | Microsoft Learn
Row-level security - Microsoft Fabric | Microsoft Learn
To Raise Support ticket:
https://learn.microsoft.com/en-us/power-bi/support/create-support-ticketThanks & Regards,
Prasanna Kumar
7 Replies
- suparnababu8
Hi AntoineW
I replicated your scenario, it's showing like reomev role for the table. not showing the options as mentioned in the Documentation.
As per my reasearch, it will not work for Trail Capcites, if I am correct. Please go thorugh this thread Solved: Re: One Lake Security - Row Security not available - Microsoft Fabric Community It may clarify you.
Please let me know if it helps you.
Thank you!
Did I answer your question? Mark my post as a solution!
Proud to be a Super User!- AntoineW
Hi suparnababu8,
Thanks for your reply, I'm currently on a paid fabric capacity and still not working, it's not mentionned that we need a F64 for that features. Seems like a bug...
- suparnababu8
Agree with you! Let's see if CST team responds on this!
Thanks for bringing this!
- spaceman127
Hi AntoineW ,
Hi,
Until recently, you had to fill out a Forms form to activate this feature. I just tested it again, and the form is now inactive. It also says that it should now be publicly available. So it should definitely work.
I just checked it again.
I have the same problem and i can't activate it.Here the Screenshot, my assumption has not yet been rolled out.
Best reagrds
Hi AntoineW,
Thank you for reaching out to the Microsoft Fabric Forum Community. and special thanks to suparnababu8 and spaceman127 for prompt and helpful responses.
Right now, the reason you don’t see the Row level/Column level security options in OneLake Lakehouse is likely because the feature is still in preview and not yet fully rolled out to all tenants/regions. To use it, a few things must be true, your Lakehouse security must be enabled, tables must be in Delta Parquet format, and the SQL Analytics Endpoint must be set to “User’s identity”. Also, Admin/Contributor roles always bypass RLS, so testing should be done with a Viewer role. If you’ve confirmed all this and still don’t see the option, it likely means your tenant hasn’t received the preview yet. The best step is to raise a support ticket with Microsoft Fabric to check whether your tenant/region is included in the rollout and, if not, request access.
OneLake Security for SQL analytics endpoints (Preview) - Microsoft Fabric | Microsoft Learn
Get started with OneLake security (preview) - Microsoft Fabric | Microsoft Learn
Row-level security - Microsoft Fabric | Microsoft Learn
To Raise Support ticket:
https://learn.microsoft.com/en-us/power-bi/support/create-support-ticketThanks & Regards,
Prasanna Kumar
Any update on the rollout status of this feature?
- spaceman127
Hi TheInvisbleHand,
yes. Today i have tested it.
See the Screenshot. You can change the identitys in the SQL Endpoint.
Important its still in Preview!
Best regards
