Forum Discussion
Write permission to a specific OneLake folder without permission to view Power BI reports
Hi tdinh ,
Thanks for reaching out to Microsoft Fabric Community,The "Manage Onelake data access" option currently allows only read-only permissions to be assigned at the folder level. There is no option to assign write permissions directly to a folder unless the user is granted a broader workspace-level role, such as Contributor, Member, or Admin.
Since those roles also grant access to Power BI reports and other artifacts in the workspace, they don't meet the need for upload-only access.
Please open this link for more details: Onelakedata access control
To enable users to upload files without seeing reports:
-
Create a separate workspace specifically for file uploads.
-
Assign the user a Contributor role in that workspace.
-
Then use OneLake shortcuts to link the uploaded files into your reporting workspace.
Hope this helps. Please reach out for further assistance.
If this post helps, then please consider to Accept as the solution to help the other members find it more quickly and a kudos would be appreciated.Thank you.
-
Super UserHi tdinh
Sure, here's a shorter version without highlights or bold formatting, suitable for posting in the Microsoft Fabric Community:
Yes, this is possible, but with some limitations.
If the user is working within Microsoft Fabric, you can go to the Lakehouse, open "Manage access" on a specific folder, and assign them Write permission. This will let them upload files without giving access to any reports, as long as they are not added to the workspace as a viewer or member.
If the user needs to upload using external tools like Azure Storage Explorer or APIs, then you typically need to assign the "Storage Blob Data Contributor" role. However, OneLake is not a classic storage account, so you won't find it in the Azure portal. Access would have to be managed via Microsoft Entra ID or the Fabric REST API.
In short, folder-level upload access is possible through the Fabric interface, but external access is more complex due to the way OneLake is structured.
thanks Amar_Kumar, it sounds like permission should be given on Fabric. I follow up to Manage Access and don't see option to Write. All I can see is read only. Does it mean write permission is not available unless user is Admin/Contributor/Member?