Write permission to a specific OneLake folder without permission to view Power BI reports

[tdinh]

Hi,
Is it possible to give user permission to a specific folder on OneLake so they can upload the files but not allow them to view the final reports? There are mixed responses as we can only give read permission to specific folder or we have to nanvigate to ADLS2 on Azure portal to set up Storage Blob Data Contributor permission. However, I could not find ADLS2 on Azure.

[v-veshwara-msft]

Hi @tdinh ,

We’re following up once more regarding your query. If it has been resolved, please mark the helpful reply as the Accepted Solution to assist others facing similar challenges.

If you still need assistance, please let us know.
Thank you.

[v-veshwara-msft]

Hi @tdinh ,

Following up to see if your query has been resolved. If any of the responses helped, please consider marking the relevant reply as the 'Accepted Solution' to assist others with similar questions.

If you're still facing issues, feel free to reach out.

Thank you.

[v-veshwara-msft]

Hi @tdinh ,

Just checking in to see if you query is resolved and if any responses were helpful. If so, kindly consider marking the helpful reply as 'Accepted Solution' to help others with similar queries. 

Otherwise, feel free to reach out for further assistance.

Thank you.

[v-veshwara-msft · Accepted solution]

Hi @tdinh ,
Thanks for reaching out to Microsoft Fabric Community,

The "Manage Onelake data access" option  currently allows only read-only permissions to be assigned at the folder level. There is no option to assign write permissions directly to a folder unless the user is granted a broader workspace-level role, such as Contributor, Member, or Admin.

Since those roles also grant access to Power BI reports and other artifacts in the workspace, they don't meet the need for upload-only access.

Please open this link for more details: Onelakedata access control 

To enable users to upload files without seeing reports:

• Create a separate workspace specifically for file uploads.

• Assign the user a Contributor role in that workspace.

• Then use OneLake shortcuts to link the uploaded files into your reporting workspace.

Hope this helps. Please reach out for further assistance.
If this post helps, then please consider to Accept as the solution to help the other members find it more quickly and a kudos would be appreciated.

Thank you.

[Amar_Kumar]

Hi @tdinh 

Sure, here's a shorter version without highlights or bold formatting, suitable for posting in the Microsoft Fabric Community:

---

Yes, this is possible, but with some limitations.

If the user is working within Microsoft Fabric, you can go to the Lakehouse, open "Manage access" on a specific folder, and assign them Write permission. This will let them upload files without giving access to any reports, as long as they are not added to the workspace as a viewer or member.

If the user needs to upload using external tools like Azure Storage Explorer or APIs, then you typically need to assign the "Storage Blob Data Contributor" role. However, OneLake is not a classic storage account, so you won't find it in the Azure portal. Access would have to be managed via Microsoft Entra ID or the Fabric REST API.

In short, folder-level upload access is possible through the Fabric interface, but external access is more complex due to the way OneLake is structured.

[tdinh]

thanks @Amar_Kumar, it sounds like permission should be given on Fabric. I follow up to Manage Access and don't see option to Write. All I can see is read only. Does it mean write permission is not available unless user is Admin/Contributor/Member?