Disabling Users can create Fabric items while allowing Data Activator alert creation

[aruparel]

Hi,

I have a scenario where as an ISV I would want to share content with B2B guest users in PowerBI. Create workspace where the B2B guest users can author content like the following

1. Scorecard

2. Reports

3. Alerts (data Activator)

4. Subscriptions

5. Dashboards

The B2B guest users should not be able to create any Fabric items like lakehouse, warehouse, spark pools, etc. To avoid them from becoming the noisy neighbours.

Would I be able to achieve this by disabling the "Users can create Fabric items" setting at the capacity level?

Kind Regards,

Ashish

[aj1973]

Hi @aruparel 

If the workspace is not using Fabric capacity then no need to worry about the noisy neighbors.

If not then you can disable the Fabric artifacts for a security groups 

1. Navigate to the capacity settings in the admin portal.

2. Select the capacity you want to enable Microsoft Fabric for.

3. Select the Delegate tenant settings tab, and under Microsoft Fabric, expand the Users can create Fabric items setting.

4. Check the Override tenant admin selection checkbox and verify that the Users can create Fabric items setting is enabled.

5. (Optional) Use the Specific security groups option to enable Microsoft Fabric for specific users. You can also use the Except specific security groups option, to enable Microsoft Fabric for the capacity, and exclude specific users.

6. Select Apply.

[aruparel]

Hi Amine,

Thanks for your response.

Just to confirm, if the workspace is bound to a fabric capacity, can the user create Alerts (Data Activator) even if they belong to a security group that are restricted from creating Fabric Items?

Kind Regards,

Ashish

[SaiTejaTalasila]

Hi @aruparel ,

You need to restrict the access with security groups through the admin portal.

Please refer this -

https://learn.microsoft.com/en-us/fabric/data-activator/data-activator-get-started

I hope it will be helpful.

Thanks,

Sai Teja 

[aruparel]

Hi Sai,

So could I disable "Users can Create Fabric Item" for the security group and enable "Data Activator (Preview" for the same security group ? 

Would this setting work and the users of that security group could create only data activator ?

Kind Regards,

Ashish

[SaiTejaTalasila]

Hi @aruparel ,

Yes, control them through security groups.If it is definitely required for any of the users then you need check with them why they need it if they have a valid project requirement then you can think about adding them to the existing security group.

Thanks,

Sai Teja 

[aruparel]

Hi Sai,

Thanks for your response.

Sorry for asking for multiple confirmations on this, but before I confirm with my customer, I want to ensure that I have explained my requirement properly and communicate something that is possible.

In the Tenant / Capacity settings, Tenant settings index - Microsoft Fabric | Microsoft Learn, we have the first 2 options that I have placed in the columns in the matrix below

Request you to please confirm the scenario for user 3 that I have highlighted below in orange. Assuming the users have contributor permissions on the workspace and can create powerbi items.

	Data Activator (Preview)	Users Can Create Fabric Items
User 1	Disabled	Disabled
User 2	Disabled	Enabled
User 3	Enabled	Disabled
User 4	Enabled	Enabled
	Features that they can use based on the flags set above:
User 1	They cannot create Activator and Fabric Items, but can create powerbi items
User 2	They cannot create data activator, but can create Fabric and PowerBI Items
User 3	They cannot create fabric items. They can create powerbi items. Please confirm: If the user 3 can create Data Activator even when Create Fabric Items is disabled? Will we have this Setting ("Data Activator (Preview)" or something similar to this) when Data Activator goes to GA?
User 4	They can create data activator, fabric items and powerbi items

Kind Regards,

Ashish