Skip to content

Commit 39d32a2

Browse files
authored
Merge 18e30b1 into 0da5afc
2 parents 0da5afc + 18e30b1 commit 39d32a2

File tree

2 files changed

+267
-0
lines changed

2 files changed

+267
-0
lines changed
Lines changed: 148 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,148 @@
1+
# Demostration: How to Configure Read Access
2+
3+
Costa Rica
4+
5+
[![GitHub](https://img.shields.io/badge/--181717?logo=github&logoColor=ffffff)](https://github.com/)
6+
[brown9804](https://github.com/brown9804)
7+
8+
Last updated: 2025-04-16
9+
10+
-----------------------------------------
11+
12+
> **Microsoft Fabric** is an all-in-one data analytics solution that integrates various Azure data workloads with Power BI, enabling comprehensive data management, analysis, and visualization within a single environment. Fabric consolidates data movement, data science, real-time analytics, and business intelligence, making it easier to derive meaningful insights from your data.
13+
> **Fabric F64** is a specific capacity SKU within Microsoft Fabric that provides enhanced features and capabilities for data analytics. `It allows users to view Power BI content without a per-user license, provided they are assigned the appropriate roles and added to the capacity`.
14+
15+
<details>
16+
<summary><b>List of References </b> (Click to expand)</summary>
17+
18+
- [Microsoft Fabric features by SKU](https://learn.microsoft.com/en-us/fabric/enterprise/fabric-features)
19+
- [Getting Started with Microsoft Fabric](https://www.microsoft.com/en-us/microsoft-fabric/getting-started)
20+
- [Roles in workspaces in Microsoft Fabric](https://learn.microsoft.com/en-us/fabric/get-started/roles-workspaces)
21+
- [Permission model - Microsoft Fabric](https://learn.microsoft.com/en-us/fabric/security/permission-model)
22+
- [Query the SQL analytics endpoint of your SQL database in Fabric](https://learn.microsoft.com/en-us/fabric/database/sql/query-sql-analytics-endpoint)
23+
- [Use the SQL analytics endpoint to query data](https://learn.microsoft.com/en-us/fabric/database/sql/tutorial-use-analytics-endpoint)
24+
- [Apache Spark Runtimes in Fabric](https://learn.microsoft.com/en-us/fabric/data-engineering/runtime)
25+
- [Model data in the default Power BI semantic model in Microsoft Fabric](https://learn.microsoft.com/en-us/fabric/data-warehouse/default-power-bi-semantic-model)
26+
- [Create reports on data warehousing in Microsoft Fabric](https://learn.microsoft.com/en-us/fabric/data-warehouse/create-reports)
27+
- [What is the SQL analytics endpoint for a lakehouse?](https://learn.microsoft.com/en-us/fabric/data-engineering/lakehouse-sql-analytics-endpoint)
28+
- [What is a lakehouse in Microsoft Fabric?](https://learn.microsoft.com/en-us/fabric/data-engineering/lakehouse-overview)
29+
- [Default Power BI semantic models in Microsoft Fabric](https://learn.microsoft.com/en-us/fabric/data-warehouse/semantic-models)
30+
- [How lakehouse sharing works](https://learn.microsoft.com/en-us/fabric/data-engineering/lakehouse-sharing)
31+
- [Tutorial: Stream and consume events to and from Real-Time Intelligence by using an Apache Kafka endpoint in an eventstream](https://learn.microsoft.com/en-us/fabric/real-time-intelligence/event-streams/stream-consume-events-use-kafka-endpoint)
32+
33+
</details>
34+
35+
<details>
36+
<summary><b>Table of Content </b> (Click to expand)</summary>
37+
38+
- [Overview](#overview)
39+
- [Viewer Role in Fabric Workspaces](#viewer-role-in-fabric-workspaces)
40+
- [Granting Read and ReadData Access to the Semantic Model](#granting-read-and-readdata-access-to-the-semantic-model)
41+
- [SQL Analytics Endpoint in Fabric](#sql-analytics-endpoint-in-fabric)
42+
- [Granting App Audience in Fabric](#granting-app-audience-in-fabric)
43+
44+
</details>
45+
46+
## Overview
47+
48+
**Create a Fabric Capacity**: Follow the prompts to configure and create the capacity.
49+
50+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/8f259cac-1dcb-4129-9070-0b31899c4ab4">
51+
52+
53+
## Viewer Role in Fabric Workspaces
54+
55+
> `Fabric Workspaces` in Microsoft Fabric are `collaborative environments where users can manage, analyze, and visualize data`. These workspaces integrate various data services and tools, providing a `unified platform for data professional`s to work together
56+
57+
58+
| **Capability** | **Description** |
59+
|------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
60+
| **View All Content** | - Users can view dashboards, reports, workbooks, and other content within the workspace. <br> - This includes content created by other users, enabling collaboration and shared insights. |
61+
| **Interact with Content** | - Users can interact with the content, such as filtering and highlighting data. <br> - They can drill down into reports and dashboards to explore data in more detail. <br> - However, they cannot modify the content, ensuring that the integrity of the reports and dashboards is maintained. |
62+
| **Read Data** | - Users can read data from various sources within the workspace. <br> - This includes accessing data from SQL analytics endpoints and Lakehouse data. <br> - They can use this data to gain insights and make data-driven decisions without altering the underlying data sources. |
63+
| **View Notebooks and Lakehouses** | - Users can view notebooks, lakehouses, and everything within those lakehouses. <br> - This includes accessing and reading data stored in lakehouses, enabling comprehensive data analysis and insights. |
64+
| **View Other Objects and Artifacts** | - Users can view additional objects and artifacts such as data pipelines, Spark job definitions, ML models, experiments, and eventstreams. <br> - This ensures users have a comprehensive view of all relevant data and processes within the workspace. |
65+
66+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/5b84e72c-f353-480d-b1f1-074d0be30b8e" />
67+
68+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/79edb3ff-5177-4940-9094-be20d3ea65bb" />
69+
70+
> For information about other roles, please visit [Roles in workspaces in Microsoft Fabric](https://learn.microsoft.com/en-us/fabric/get-started/roles-workspaces). For details on the Fabric security permissions model, refer to [Permission model - Microsoft Fabric](https://learn.microsoft.com/en-us/fabric/security/permission-model).
71+
72+
| **Role** | **Description** |
73+
|----------------|-------------------------------------------------------------------------------------------------------------------------------------------------------|
74+
| **Admin** | - Full control over the workspace, including managing permissions and settings. <br> - Can create, edit, and delete content within the workspace. |
75+
| **Member** | - Can view and edit content within the workspace. <br> - Can create new reports, dashboards, and datasets. |
76+
| **Contributor**| - Similar to Member, but cannot delete content created by others. <br> - Can contribute to existing reports and dashboards. |
77+
78+
<img width="948" alt="image" src="https://github.com/user-attachments/assets/5a2f06f3-425c-48f4-ad40-f7674b25dcf0" />
79+
80+
## Granting Read and ReadData Access to the Semantic Model
81+
82+
> Semantic Model: Provides a logical description of an analytical domain using business-friendly terminology and metrics.
83+
84+
Capabilities:
85+
- Data Representation: Organizes data into a star schema with facts and dimensions.
86+
- Business Logic: Inherits business logic from parent lakehouses or warehouses.
87+
- Visualization: Supports creating Power BI reports and dashboards for visual analysis.
88+
89+
90+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/d78fcd11-779f-48f6-8539-85c751be2a5a" />
91+
92+
| **Permission** | **Purpose**| **Capabilities**| **Restrictions**|
93+
|----------------|------------------------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------|
94+
| **Modify Dataset** | Allows recipients to modify the dataset. | - Edit and update the dataset <br> - Make changes to the data structure and content <br> - Manage dataset settings (e.g., refresh schedules, data source credentials) | - Cannot share the dataset unless granted additional sharing permissions |
95+
| **Share Semantic Model** | Allows recipients to share the semantic model with others. | - Grant access to the semantic model to other users or groups <br> - Collaborate with others using the shared model | - Cannot modify the semantic model unless granted additional modification permissions |
96+
| **Build Content** | Allows recipients to build content with the data associated with the semantic model. | - Create new reports, dashboards, and datasets using the semantic model data <br> - Perform data analysis and generate insights <br> - Integrate data with other tools and platforms | - Cannot modify the semantic model or dataset unless granted additional modification permissions |
97+
| **Send Email Notification** | Sends an email notification to the recipient about the granted access. | - Notify recipients via email about their new permissions <br> - Ensure recipients are aware of their access rights | - Does not grant any additional data access or modification capabilities |
98+
99+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/ad4ab52a-b222-436d-811e-fa6b454621c9" />
100+
101+
102+
## SQL Analytics Endpoint in Fabric
103+
104+
> Lakehouse: A data architecture platform for storing, managing, and analyzing both structured and unstructured data.
105+
Capabilities:
106+
- Data Storage: Combines the capabilities of data lakes and data warehouses.
107+
- SQL Analytics Endpoint: Provides a SQL-based experience for querying data.
108+
- Automatic Table Discovery: Automatically registers and validates tables.
109+
110+
> SQL Analytics Endpoint: Allows users to query data in the lakehouse using SQL.
111+
Capabilities:
112+
- T-SQL Queries: Supports T-SQL language for querying Delta tables.
113+
- Read-Only Mode: Operates in read-only mode, allowing data analysis without modifying the data.
114+
- Security: Implements SQL security for access control.
115+
116+
> Apache Endpoint: Used for real-time data streaming and processing.
117+
Capabilities:
118+
- Event Streaming: Streams events to and from Real-Time Intelligence using Apache Kafka.
119+
- Integration: Integrates with event streams to process and route real-time events.
120+
- Scalability: Supports building scalable, real-time data systems.
121+
122+
123+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/bb835f14-3883-422b-a3c4-3f49f7b8f15e" />
124+
125+
| **Permission** | **Purpose** | **Capabilities** | **Restrictions** |
126+
|----------------|------------------------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------|
127+
| **Read All SQL Endpoint Data** | Allows users to access data without SQL policy restrictions, enabling them to perform detailed queries and analysis. | - Access and read data from SQL analytics endpoints <br> - Perform detailed queries and analysis | - Cannot modify the data <br> - Cannot manage permissions or grant access to other users |
128+
| **Read All Apache Spark** | Grants access to all data using Apache Spark, providing a broader scope of data access for advanced analytics. | - Access all data using Apache Spark <br> - Perform advanced analytics and data processing | - Cannot modify the data <br> - Cannot manage permissions or grant access to other users |
129+
| **Build Reports on the Default Semantic Model** | Allows users to create reports using the default Power BI semantic model. | - Create new reports and dashboards using the default semantic model <br> - Perform data analysis and generate insights <br> - Integrate data with other tools and platforms | - Cannot modify the semantic model or dataset unless granted additional modification permissions |
130+
131+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/10e84fab-7213-45e3-8d7c-ca9bf06aad2b" />
132+
133+
## Granting App Audience in Fabric
134+
135+
> When you create and publish an app in Power BI within Fabric, you can define multiple audiences for the app. This allows you to control who can view specific content within the app.
136+
137+
Granting app audience permissions enables the assigned identity to:
138+
139+
- View the app content, including dashboards and reports.
140+
- Interact with the app, such as filtering and highlighting data.
141+
- Access different content based on the audience group they belong to.
142+
143+
Click here for [Microsoft Fabric: Power Bi Workspace App - Overview](https://github.com/MicrosoftCloudEssentials-LearningHub/Demos-ScenariosHub/blob/main/0_Azure/2_AzureAnalytics/0_Fabric/demos/14_PbiManageAccess/0_PBi-wsApp.md)
144+
145+
<div align="center">
146+
<h3 style="color: #4CAF50;">Total Visitors</h3>
147+
<img src="https://profile-counter.glitch.me/brown9804/count.svg" alt="Visitor Count" style="border: 2px solid #4CAF50; border-radius: 5px; padding: 5px;"/>
148+
</div>
Lines changed: 119 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,119 @@
1+
# Demostration: How to Configure Workspace App
2+
3+
Costa Rica
4+
5+
[![GitHub](https://img.shields.io/badge/--181717?logo=github&logoColor=ffffff)](https://github.com/)
6+
[brown9804](https://github.com/brown9804)
7+
8+
Last updated: 2025-02-03
9+
10+
------------------------------------------
11+
12+
> How to create a Power Bi Workspace App from the beginning and share it with external users. The same steps apply to security groups; simply replicate the process for a security group and add members to it.
13+
14+
1. Create your Fabric Capacity
15+
16+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/8f259cac-1dcb-4129-9070-0b31899c4ab4">
17+
18+
2. Go to [Fabric](https://app.fabric.microsoft.com/), and assign the capacity created to the workspace desired.
19+
20+
<img width="248" alt="image" src="https://github.com/user-attachments/assets/f9847839-9827-4ba4-8ca8-0f71a6229acc"> <br/>
21+
22+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/a93b9b06-e887-45f2-a621-29ebab58f845"> <br/>
23+
24+
> Select the `large semantic model only if your model exceeds 10 GB`. If not, use the small model. The large setup is for models up to 10 GB.
25+
26+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/0b540105-e554-4056-b06c-cd3babc873e9">
27+
28+
3. Create a lakehouse to store your data:
29+
30+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/07aa957b-48f0-4114-926a-d6004d96f93c">
31+
32+
4. Get your data, in this case a CSV file will be used
33+
34+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/d2949bee-f968-48d6-9c23-13984fde3311">
35+
36+
5. After uploading the information, create the tables or upload the information to your existing tables:
37+
38+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/664eeb04-7d09-4e7f-bd92-22e954ef689d">
39+
40+
6. Create a semantic model based on your tables:
41+
42+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/f892506e-46a5-42bd-ba2f-585601e5a7a1">
43+
44+
7. Now you are able to create a report based on the semantic model created, you can ask copilot to create a draft report with the `Auto-create report` option.
45+
46+
> [!NOTE]
47+
> Make sure to activate the setting under `Admin Portal -> Tenant Settings -> Copilot/Data -> Enabled`. [Click here for more details](https://github.com/brown9804/MicrosoftCloudEssentialsHub/blob/main/0_Azure/2_AzureAnalytics/0_Fabric/demos/6_PBiCopilot.md#tenant-configuration)
48+
49+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/aa306dcc-0bbd-4fdb-bb5f-04ef79e9dfc8">
50+
51+
- You will see something like this:
52+
53+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/c3101f92-d6cf-4df0-aabd-c0e0951994eb">
54+
55+
<img width="955" alt="image" src="https://github.com/user-attachments/assets/99ec33b0-33c8-4fbc-93fb-8c8285ba5fae">
56+
57+
- You can leverage copilot to modify your report:
58+
59+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/1d46a462-252a-44bc-9d6b-420816878546">
60+
61+
- Once you are ready, save your report:
62+
63+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/0d663e5a-2a8f-4e74-83d9-21e6bc4801ad">
64+
65+
- At this point you will have your `lakehouse`, with your `SQL analytics endpoint`, the `semantic model` and `the report`.
66+
67+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/180304fa-2bd5-4de4-9ef1-b4e290ce2929">
68+
69+
8. A paginated report, can also be created:
70+
71+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/ccccd176-dd0e-48cc-b6b8-1a7bab1e0a90">
72+
73+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/26ec846b-3527-4328-9af0-6e17c60a256c">
74+
75+
9. Create an App, and assign the required audience:
76+
77+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/c575a4e3-d7bd-4eb6-b61f-ee8345ec5c68">
78+
79+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/c68d60de-801a-4d9c-98aa-a66d0cfa9dc6">
80+
81+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/e2f45540-1b89-46bb-82a2-997c36bb5351">
82+
83+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/057aa31e-7818-40f5-ac60-5f12425380c1">
84+
85+
> [!IMPORTANT]
86+
> If you encounter these errors, it's necessary to grant the appropriate `(semantic model, sql analytics endpoint, and the app` permissions for access.
87+
88+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/7361815f-7a53-4ae7-80f9-5bd6e3033b59">
89+
90+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/05fac487-647a-48c2-b2b9-d9f1f0b172ea">
91+
92+
- Let's say you want only `viewer` permissions:
93+
94+
1. Need to give access to the lakehouse/sql analytics endpoint:
95+
96+
<img width="436" alt="image" src="https://github.com/user-attachments/assets/814f831f-19b8-4939-a3e2-618385c4827b">
97+
98+
> `Read All SQL Endpoint Data` permission allows users to access and read data from SQL endpoints within the Fabric environment. This permission is typically required for users who need to: <br/>
99+
> - Query Data: Execute SQL `queries against the data stored in the Fabric environment`. <br/>
100+
> - Access Reports: `View and interact with reports and dashboards that rely on SQL data sources`. <br/>
101+
> - Data Analysis: `Perform data analysis and generate insights` using SQL-based data.
102+
103+
104+
105+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/b87137f1-b464-43df-a04d-593a41b3131a">
106+
107+
2. Make sure the person already have access to the semantic model:
108+
109+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/f5344f85-53f3-48dc-b0b1-6b3c5995bbd6">
110+
111+
> - Granting `Read, ReadData` access to the `semantic model, sql analytics endpoint` <br/>
112+
> - Grating `App audience` will enable the assigned identity to view it.
113+
114+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/353d88ad-a4a7-4aef-aff4-d584901c29d8">
115+
116+
<div align="center">
117+
<h3 style="color: #4CAF50;">Total Visitors</h3>
118+
<img src="https://profile-counter.glitch.me/brown9804/count.svg" alt="Visitor Count" style="border: 2px solid #4CAF50; border-radius: 5px; padding: 5px;"/>
119+
</div>

0 commit comments

Comments
 (0)