Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Be one of the first to start using Fabric Databases. View on-demand sessions with database experts and the Microsoft product team to learn just how easy it is to get started. Watch now

Reply
gracielatriv
Frequent Visitor

Restrict access to data based on group or department criteria

Hello dear community!

I am trying to give access permissions to a data set in my one lake. The intention is to have the entire set of company data there and then according to the department or a specified group of people, filter my set so that each one sees their data and not that of the others, or according to which groups can or cannot access to a set of data. I would like to create dataset, lakehouse , warehouses with the data filtered according to my people group criteria. How can I do this?
Thank you very much in advance!!

1 ACCEPTED SOLUTION
AndyDDC
Most Valuable Professional
Most Valuable Professional

At the moment domains themselves can't separate workloads from users/groups, that's still at the workspace level. Users/groups can be assigned to workspaces then workspaces to domains.

 

However this operates in a level above row/column level security. Workspace security is more about the user being able to access the object itself like a report, dataset, lakehouse. Whereas row/column level security is what data within those items they can see. You can conbine workspace and rls/cls. I hope that helps. 

View solution in original post

5 REPLIES 5
AndyDDC
Most Valuable Professional
Most Valuable Professional

Hi @gracielatriv there is row and column level security available which will help restrict certain data to certain people/groups 

 

https://blog.fabric.microsoft.com/en-us/blog/announcing-column-level-row-level-security-for-fabric-w...

 

Hello @AndyDDC !!

What a coincidence, I just saw one of your videos on YouTube talking about using domains to group workspaces. Can I use domains to achieve my goal of partitioning my enterprise data set or is the new addition of row or column level security better?

 

thank you so much !!

AndyDDC
Most Valuable Professional
Most Valuable Professional

At the moment domains themselves can't separate workloads from users/groups, that's still at the workspace level. Users/groups can be assigned to workspaces then workspaces to domains.

 

However this operates in a level above row/column level security. Workspace security is more about the user being able to access the object itself like a report, dataset, lakehouse. Whereas row/column level security is what data within those items they can see. You can conbine workspace and rls/cls. I hope that helps. 

It was the information I needed, thank you very much @AndyDDC !!
I will go into more detail on these two terms.

Hi @gracielatriv ,
Glad that your query got resolved. Please continue using Fabric Community for any help regarding your queries.

Helpful resources

Announcements
Las Vegas 2025

Join us at the Microsoft Fabric Community Conference

March 31 - April 2, 2025, in Las Vegas, Nevada. Use code MSCUST for a $150 discount!

Dec Fabric Community Survey

We want your feedback!

Your insights matter. That’s why we created a quick survey to learn about your experience finding answers to technical questions.

ArunFabCon

Microsoft Fabric Community Conference 2025

Arun Ulag shares exciting details about the Microsoft Fabric Conference 2025, which will be held in Las Vegas, NV.

December 2024

A Year in Review - December 2024

Find out what content was popular in the Fabric community during 2024.