Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
4 months ago
Solved

Help with semantic model and RLS in Fabric

On my lab i'm created a workspace and lakehouse and in lakehouse i created a sample table and model semantic.  In semantic model i created the function RLS and create auto-report too. I do perm...
Need Help
  • v-dineshya's avatar
    v-dineshya
    4 months ago

    Hi Anonymous ,

    Thank you for reaching out to the Microsoft Community Forum.

     

    Hi Jai-Rathinavel , Thank you for your prompt response.

     

    Hi Anonymous ,The error "Fields that need to be fixed you don't have required permissions"
    refer that, semantic model cannot query lakehouse, NOT an RLS problem and it's authentication problem.

     

    Please refer below architecture.


    Lakehouse --> Semantic Model (RLS defined here)  (Workspace Identity) --> Report --> Users (no lakehouse access)


    Note: You need Workspace Identity. Default SSO alone is not sufficient when using RLS and hiding lakehouse access.

     

    I hope this information helps. Please do let us know if you have any further queries.

     

    Regards,

    Dinesh

Anonymous's avatar
Anonymous
Not applicable
4 months ago

Hi Jai-Rathinavel Good Morning!

 

So in mi test when i create the semantic model and the connection is Default SSO i have this error 


The report visualization just work if the user have access in lakehouse or if i change de Dafault SSO Connection to Workspace Identity or Cloud Connections.


Now i changed the connection 

 

Now the same report with error above now its working with rls 



I read in this blog that way is the most security way to share report with RLS, thats statment is correclty? 

https://blog.fabric.microsoft.com/en-us/blog/support-for-workspace-identity-authentication-and-trusted-access-to-adls-gen2-in-semantic-models?ft=Fabric-platform:category

 

v-dineshya's avatar
v-dineshya
Community Support
4 months ago

Hi Anonymous ,

Thank you for reaching out to the Microsoft Community Forum.

 

Hi Jai-Rathinavel , Thank you for your prompt response.

 

Hi Anonymous ,The error "Fields that need to be fixed you don't have required permissions"
refer that, semantic model cannot query lakehouse, NOT an RLS problem and it's authentication problem.

 

Please refer below architecture.


Lakehouse --> Semantic Model (RLS defined here)  (Workspace Identity) --> Report --> Users (no lakehouse access)


Note: You need Workspace Identity. Default SSO alone is not sufficient when using RLS and hiding lakehouse access.

 

I hope this information helps. Please do let us know if you have any further queries.

 

Regards,

Dinesh

  • v-dineshya's avatar
    v-dineshya
    Community Support
    4 months ago

    Hi Anonymous ,

    We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. And, if you have any further query do let us know.

     

    Regards,

    Dinesh

    • v-dineshya's avatar
      v-dineshya
      Community Support
      4 months ago

      Hi @alexandregmferr ,

      We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. And, if you have any further query do let us know.

       

      Regards,

      Dinesh