admin
1046 TopicsMicrosoft Fabric Security Policies are not available in North Europe region
This feature is critical for Fabric features adoption in my company. Our tenant is located in North Europe region, so it will be great to know when current limitation will be resolved ? Thanks for your support.60Views0likes3CommentsHow does Fabric handle concurrent real-time ML inference requests?
## Regarding the scalability and performance of Fabric ML model endpoints. For our Use case, we're planning to deploy an XGBoost/LightGBM model in Fabric and consume the prediction endpoint through the application. Can the API support bulk predictions. For example, we may send 10 records in a single request, but we could also have multiple users calling the same endpoint simultaneously. I understand Fabric manages the underlying compute and supports automatic scaling, but I wanted to clarify a few things: How does Fabric handle concurrent requests to the same ML endpoint? Is the load balancing managed automatically? Are there any concurrency, throughput, or request-size limits we should consider? How does the scaling behave when the number of concurrent requests increases, and what impact does this have on response time and capacity consumption? Are there any recommended approaches for load testing or configuring the endpoint for production applications? Our main concern is ensuring that the prediction service doesn't affect the existing performance of the application. Has anyone tested Fabric ML endpoints with concurrent requests or used them for a similar application integration?57Views0likes3CommentsRegistro Microsoft Fabric free
Buenas tardes; Podrian ayudarme con este problema que tengo en el registro de mi correo corporativo a Microsoft fabric free. Mi correo es REDACTED y al realizar el registro no me llega ningún correo con el código de verificación para continuar con el registro. The image was removed due to personal information being shared. Ya probé que al correo me estén llegando nuevos correos e hice pruebas de envió y si me llegan correos pero ninguno de microsoft con el código de verificación.59Views0likes3CommentsPaginated Report issue
Hi, In my paginated report datasource i am using the semantic model from power bi report. But when i used the same measure in the paginated report the data differs as it is coming correctly for all measures but for Sales, Sales Volume% and YOY%. In the tablix, i am using dimensions in the row group grouping based on the account id and some measures in the column also Month wise sales and semester wise sales in the measures. Here all the data is coming correctly but only the 3 values are not matching. Help me with the solution for this.96Views0likes6CommentsMicrosoft Fabric Security Policies: How They Strengthen Data Security and Governance?
In today’s data-driven world, governance isn’t just about compliance — it’s about enabling trust, consistency, and scale. As organizations adopt Microsoft Fabric to unify their analytics, the challenge of managing who can do what, where, and under which conditions become critical. That’s where Microsoft Fabric policies step in. Think of them as the rulebooks that let administrators define guardrails across workspaces, security groups, and sensitivity labels. Instead of relying on manual oversight, policies provide a centralized, automated way to enforce governance — ensuring that innovation doesn’t come at the cost of control. In this blog will walk you through the key concepts, the entry points for creating and activating policies, and the end-to-end lifecycle that makes governance in Fabric both powerful and practical. Prerequisites: 1) A Valid Fabric Trail / Capacity License 2) A Fabric workspace assigned to a Capacity/Fabric Trail. 3) Proper admin role to activate the policy a) Fabric administrator: Can create and activate policies for tenant-scope policies. b) Capacity administrator: Can create and activate policies for capacity-scope policies. 4) Contributor, Member, or Admin access to the workspace so that you can create a policy item type. 5) The Policies tenant setting is enabled in Admin settings 6) Valid Security groups in AAD. Step 1: Enable the Policies feature in the admin settings Go to fabric admin settings, search for polices(preview) and enable the setting and click on apply. Step 2: Creating Policy item Create a workspace ‘Fabric-Polices-Ws’ which was assigned to ‘Fabric Trail’ and I’m (SI Babu) who’s the capacity admin. Make sure this should be a secured, admin-managed workspace to store policies. Click on ‘New Item’ and select ‘Policy set (preview)’ under ‘Govern data’ In New policy set dialog, enter a unique and descriptive Name ‘Capacity_PolicySet_1’ for the policy set and choose ‘ A capacity’ under policy scope then Click on ‘Create’ Create another policy set ‘Tenent_Policy_set2’ and choose ‘ Fabric Tenant’ under policy scope then Click on ‘Create’ Two policy sets are created. Step 3: Activating the Policy set Open Capacity policy set and select the ‘Active’ from Status Select the capacity and click on ‘Assign + activate’ Policy activated successfully Open Tenant policy set and select the ‘Active’ from Status Click on ‘Activate’ the policy Policy activated successfully Step 4: Create / Add Policy Rules(Capacity Policy) Click on ‘OneLake catalog’ Click on ‘Govern’ à‘Polices(preview)’ àCapacitiesàExpand the ‘Users can create items’ and select ‘Advanced’ Here, Select Allowed, Blocked, or Advanced (Set by user) to change the policy behavior. If you select Advanced, the rules configuration is enabled. Add a new rule with good name, description and Select ‘item type’ in Condition type, operator is ‘Is any of’ the select ‘Lakehouse’ and ‘Dataflow gen2’ then click on ‘+Add condition’ Choose ‘workspace’ in condition type, operator is ‘Is any of’ selected two workspaces gen2’ then click on ‘+Add condition’ Choose ‘Security group’ in condition type, operator is ‘Is any of’ selected my ‘Data Analyst’ AD group. Click on Apply Note: In this Data Analyst group we have three developers are there Click on “Save’ Now Policy successfully added Step 5: Validate policy enforcement (Capacity Policy) Added ‘Data Analyst’ AD group to both the workspaces ‘FabricRTI Training’ & ‘PowerBI-Demo-WS’ Now I was opened another window with account(SP Babu) who’s part of AD group & you can see two workspaces Create a ‘Notebook’ Now when I click on “Create” it’s throwing an error as you seen in below screenshot. Means it enforced a policy Again, When I was trying to create ‘Warehouse’ it’s throwing the same error. I (SP Babu) was able to create ‘DataFlowGen2’. Admin enforced to create only this item I (SP Babu) was able to create ‘Lakehouse’. Admin enforced to create only this item Step 6: Create / Add Policy Rules(Tenant Policy) Create another policy should be at tenant level to restrict workspace Outbound access protection and inbound network rules and click ‘add condition’ Add “Security group’ as I have IT Infra Team and click Apply Note: In this IT Infra Team group we have three resources are there Security policy created successfully Step 7: Validate policy enforcement (Tenant Policy) Now SP Babu unable to edit ‘Outbound access’ it’s showing ‘This setting is managed by a tenant policy.’ SP Babu unable to edit ‘Inbound access’ it’s showing ‘This setting is managed by a tenant policy.’ You can deactivate or replace an active policy set from the workspace where the policy set is stored. Only an administrator of the policy set's admin scope can deactivate or replace it. Best practices for creating a policy: Use a secured, admin-managed workspace to store policies. Store all policies for the admin scopes managed by the same administrator or admin team in the same workspace. This approach provides one location for tenant- and capacity-scoped policies and simplifies access management, discovery, and lifecycle management. Use clear policy set and rule names that identify the admin scope and purpose. Use test users who are members and non-members of the configured security groups to validate both allow and deny outcomes before broader rollout. Limitations as of now: Fabric policies aren't currently supported in the following capacity regions: West Europe, North Europe, and West US. We can currently create policy sets only from the item creation experience in a workspace. Only workspaces assigned to a Fabric capacity can store policy sets. We can't change a policy set's admin scope after creation. Only one policy set can be active for an admin scope at a time. Policy and tenant-setting changes can take time to propagate. Conditions support Any of and None of in the current preview. We can't activate a policy set through Git. So, start small with pilot policies, monitor audit logs for adoption and Communicate changes to workspace owners Conclusion Microsoft Fabric Policies are still in preview, but they signal a future where governance is not a blocker — it’s an enabler of responsible innovation. Happy learning! — Inturi Suparna Babu [LinkedIn]118Views8likes5CommentsCannot start Fabric Trial
Hi everyone, I am new to Fabric, I would like to start Fabric Trial to explore the platform. Unfortunately I couldn't start the 60 days trial option. I created an user from Entra ID and gave it Fabric admin and some other admin roles to use this, but it din't work. Could anyone please guide me how to solve this? I would appreciate your help. Thank you very much.24Views0likes1CommentUnable to activate Microsoft Fabric free trial — Error code 200
Hi everyone, I created a new Microsoft Entra ID tenant and Azure account today. My Power BI 60-day trial is active, but I cannot activate the Microsoft Fabric capacity trial. When I click Start Fabric trial or try to create a Lakehouse, I receive this message: "A Fabric trial isn't available for your account." The activation error says: "Sorry, we are unable to start trial at this time." I have tried both Safari and Chrome, and the issue persists. I also tried submitting a Microsoft support request, but the form failed with "HttpRequestWorker.requestInternal error create ticket 400." I selected Southeast Asia as my region. Has anyone encountered this issue with a newly created tenant? Is there a waiting period before a new tenant becomes eligible for the Fabric trial, or is there another workaround? Thank you!56Views0likes4CommentsWorkspace and github
Hello, in this time, I try to configure the syncronized worskpace and github, in the workspace the role is admin, and when I click in soruce contro, it show me a message: What actually means... Am I have to connect with github account? how? I'am not the owner of the repo in github.. Thanks in advance.Solved50Views0likes3CommentsFabric VNET Diagnostic Logs download automation
Hello folks, Since this feature was released, I needed to download these Fabric VNET diagnostic logs and choose monitored period on manually basis. Is there any forecast enhancement on the VNET roadmap to make this download possible via automation (Ex: Using Fabric API or similar)? All articles & forums I´ve visited mentioned that this option is not available to be downloaded from Fabric API or similar neither have those logs files available in a kind of Azure Diagnostic logs / Azure storage account file repository. Do you know if there is already any solution for this or when it will be released? Official main article: https://learn.microsoft.com/en-us/data-integration/vnet/data-gateway-download-diagnostics Please advice Thank you in advance28Views0likes1CommentControlled "Semantic Model Execute Queries" REST API Access for Fabric Users
We want to enable the executeQueries endpoint for a large audience of users so that an application can execute DAX queries against a directlake model (with SSO enabled) on their behalf. Enabling this endpoint poses a security risk because it allows users to access Fabric via unapproved tools. (Some are safe and helpful, but this can't be guaranteed.) The relevant tenant setting ("Semantic Model Execute Queries REST API") can be scoped to security groups, but it cannot limit incoming traffic to a specific source (our trusted application). Fabric provides controls to limit inbound traffic - IP allow-lists, private links at the workspace level, conditional entra access policies, etc. We have reviewed the options on this page: About inbound access protection in Fabric - Microsoft Fabric | Microsoft Learn. Semantic models are not supported for most of these solutions (private links, for example), and even if they were, they seem like they would treat API access and portal access the same. Any setting that sufficiently restricts traffic to the API endpoint would also lock users out of the Fabric portal itself (or unnecessarily restrict data in the portal). Have we missed anything? Is there a way to conditionally allow API access from specific sources for security groups without negatively impacting users by applying those same restrictions to standard portal access?57Views0likes8Comments