Microsoft Fabric Analytics Engineer Associate Study Guide

Chapter 7. Implementing Security and Governance

Microsoft Fabric provides a robust set of tools and features to help you handle security and governance effectively, and in this chapter, we’ll walk you through them. We’ll begin by exploring how to implement workspace-level access controls, which manage who can access and work within your Fabric workspaces. Next, we’ll move on to more granular control by implementing item-level access controls and managing access control to compute resources. Then, we will dive deeper into advanced data security with row-level, object-level, and file-level access controls, ensuring users only see the specific data they are authorized to view. After that, we will learn how to apply sensitivity labels to classify and protect your most sensitive data items. Finally, we’ll cover how to endorse items, a process that builds trust and promotes the use of high-quality, validated data throughout your organization.

Implementing Workspace-Level Access Controls

You can configure access to every workspace in Microsoft Fabric. Consider the scenario in Figure 7-1.

It’s a demo setup where you have five different workspaces (Workspaces A through E) and user groups with five different access control requirements (User groups 1 through 5). This setup is nonexhaustive and only shows a subset of the possible different combinations. User group 1 has read access to Workspace A and Workspace B, User group 4 has the access it needs to create items in Workspace B and Workspace ...