Forum Discussion
RLS and Column level security
Dears,
If I am not wrong, in semantic models , weather using, Direct lake or Import or Direct Query, we can create RLS and Column Level Security. This is done, again, if I am not wrong, via the semantic model security not via the new OneLake security funcionalitity, correct?
Now, using the new onelake security feature, can we also do RLS and Column Level Security for Tables and Views inside lakehouses? or we can only do object level?
Thanks a lot,
Pedro
- While sharign the lakehouse, no need to select any option on the UI (Alread mentioend ind etaled in my blog pls chec the blog).
- yes correct, you can use Onelaeke secuirty for object level security is enforced thrugh OneLake security only not just regular item-level permissions
I highly recommend you practrise the above blog then u will get hands on knwoledge and idea about all OLS, CLS
Hoep this helps you
Thank you!!
Did I answer your question? Mark my post as a solution!
Proud to be a Super User!- While sharign the lakehouse, no need to select any option on the UI (Alread mentioend ind etaled in my blog pls chec the blog).
5 Replies
Hi fabricpribeiro,
You are correct that when you configure RLS in the model, it is not using OneLake Security.
OneLake Security does both RLS and CLS:
https://learn.microsoft.com/en-us/fabric/onelake/security/row-level-securityhttps://learn.microsoft.com/en-us/fabric/onelake/security/column-level-security
Thanks a lot for your
Can you please clarify below two points, please?
Q1 :
"OneLake Security does both RLS and CLS" can it be implemented in lakehouses? so that we can have RLS and CLS for the tables? and what about for the files ? LH have both sections files and tables.
Q2 : This is enforced as well in the SQLEndPoint? if we implement it at lakehouse level? menaing this RLS via OneLake Security?
Q1: yes for table we can implement RLS and CLS but not for Files sections. How RLS and CLS is applicable for File sesction? bcz data is stored in files format not Tbale format.
For files section you can implement, Read or ReadWrite Data access for all the files section or Selected folders.Q2: Yes, it ;s applicable for SQL end point also, but you no need to grant the SQL aanyltics end point access to user while sharing the l;akhouse.
Please read this blog you will get better clarity. Fine-grained ReadWrite access to data with OneLake... - Microsoft Fabric Community
Hope this helps you
Thank you!!
Did I answer your question? Mark my post as a solution!
Proud to be a Super User!
