Forum Discussion
Users to trigger UDF from a Workspace App without explicit permissions
Hi,
We use the Workspace App to distrubute reports to normal users who have no access to the workspace via the Audiences.
Now we want to implement UDFs in the report, that when clicked will trigger a pipeline to run with service principal authentication.
Now, I have to add grant the users explicitly Read and Execute permissions on the UDF fabric artifact. This means the users can view the code of the UDF.
So, is it possible to have that layer hidden? Meaning, the user can only fire the UDF from the App and cannot inspect the code of the UDF itself.
CCal Unfortunately, no Fabric UDFs don’t support that “execute‑only” permissions. Anyone who can run the function will still be able to see the published code in read‑only mode. I could only get the below as a reference.
If the users are not passing any values through UDF, you can try triggering the pipeline through Power Automate instead of calling the UDF directly.
2 Replies
CCal Unfortunately, no Fabric UDFs don’t support that “execute‑only” permissions. Anyone who can run the function will still be able to see the published code in read‑only mode. I could only get the below as a reference.
If the users are not passing any values through UDF, you can try triggering the pipeline through Power Automate instead of calling the UDF directly.
Hi Jai-Rathinavel ,
Thank you for the quick response.We're tried doing this with Power Automate before, but ran into some permissions obstacles.
I'll try to explore that route again. Thanks.
