Skip to content

Commit 3bcf144

Browse files
brown9804brown9804
authored
Merge pull request #21 from MicrosoftCloudEssentials-LearningHub/warehousePermissions
Warehouse Permissions - Shared workspace
2 parents d2ac9f9 + 412c2ce commit 3bcf144

File tree

3 files changed

+178
-0
lines changed

3 files changed

+178
-0
lines changed

‎Security/README.md‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,8 @@ Last updated: 2025-05-08
1010
------------------------------------------
1111

1212
- [Lakehouse Permissions](./LakehousePermissions.md): Lakehouse, Semantic Model, SQL Endpoint
13+
- [Warehouse Permissions](./WarehousePermissions.md): Warehouse, Semantic Model
14+
- [Semantic Models Permissions](./SemanticModelsPermissions.md): Semantic Models
1315

1416
<div align="center">
1517
<h3 style="color: #4CAF50;">Total Visitors</h3>

‎Security/SemanticModelsPermissions.md‎

Lines changed: 45 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,45 @@
1+
# Semantic Models: Security \& Governance
2+
3+
Costa Rica
4+
5+
[![GitHub](https://img.shields.io/badge/--181717?logo=github&logoColor=ffffff)](https://github.com/)
6+
[brown9804](https://github.com/brown9804)
7+
8+
Last updated: 2025-05-08
9+
10+
------------------------------------------
11+
12+
<details>
13+
<summary><b>List of References</b> (Click to expand)</summary>
14+
15+
- [OneLake data access control model (preview)](https://learn.microsoft.com/en-us/fabric/onelake/security/data-access-control-model)
16+
- [Permission model](https://learn.microsoft.com/en-us/fabric/security/permission-model)
17+
- [Manage Direct Lake semantic models](https://learn.microsoft.com/en-us/fabric/fundamentals/direct-lake-manage)
18+
19+
</details>
20+
21+
> Semantic Model is a `curated layer` that provides a `business-friendly view of data`. It abstracts complex data structures into understandable entities, measures, and relationships, enabling users to create reports and perform analysis without needing to write complex queries. E.g `custom data view`.
22+
23+
<div align="center">
24+
25+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/c46b93b5-4a64-4066-8c30-19a0dbe77c84" style="border: 2px solid #4CAF50; border-radius: 5px; padding: 5px;"/>
26+
27+
</div>
28+
29+
<div align="center">
30+
31+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/76b8801d-9b32-4e98-9301-0d85ef607346" style="border: 2px solid #4CAF50; border-radius: 5px; padding: 5px;"/>
32+
33+
</div>
34+
35+
| **Permission** | **Definition** | **Use Cases** |
36+
|----------------------------------------------------------------------|------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------|
37+
| Allow recipients to modify this dataset | Grants users the ability to make changes to the semantic model, including schema and data updates. | - `Data Modeling`: Adjusting measures, columns, or relationships.<br/>- `Collaboration`: Co-authoring datasets with team members. |
38+
| Allow recipients to share this semantic model | Lets users share the semantic model with others. | - `Team Access`: Granting access to additional users.<br/>- `Self-service BI`: Empowering users to manage access without admin intervention. |
39+
| Allow recipients to build content with the data associated with this semantic model | Enables users to create reports, dashboards, and other content using the semantic model. | - `Power BI Reports`: Building visuals and dashboards.<br/>- `Embedded Analytics`: Using the model in apps or portals.<br/>- `Ad hoc Analysis`: Exploring data. |
40+
| Send an email notification | Sends an email to notify the recipient about the access granted. | - `Communication`: Ensuring users are informed of their new access.<br/>- `Onboarding`: Helping users get started with the semantic model. |
41+
42+
<div align="center">
43+
<h3 style="color: #4CAF50;">Total Visitors</h3>
44+
<img src="https://profile-counter.glitch.me/brown9804/count.svg" alt="Visitor Count" style="border: 2px solid #4CAF50; border-radius: 5px; padding: 5px;"/>
45+
</div>

‎Security/WarehousePermissions.md‎

Lines changed: 131 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,131 @@
1+
# Warehouse: Security \& Governance
2+
3+
Costa Rica
4+
5+
[![GitHub](https://img.shields.io/badge/--181717?logo=github&logoColor=ffffff)](https://github.com/)
6+
[brown9804](https://github.com/brown9804)
7+
8+
Last updated: 2025-05-08
9+
10+
------------------------------------------
11+
12+
<details>
13+
<summary><b>List of References</b> (Click to expand)</summary>
14+
15+
- [Security for data warehousing in Microsoft Fabric](https://learn.microsoft.com/en-us/fabric/data-warehouse/security)
16+
- [Permission model](https://learn.microsoft.com/en-us/fabric/security/permission-model)
17+
- [Share your data and manage permissions](https://learn.microsoft.com/en-us/fabric/data-warehouse/share-warehouse-manage-permissions)
18+
19+
</details>
20+
21+
<details>
22+
<summary><b>Table of Contents</b> (Click to expand)</summary>
23+
24+
- [Read all data using SQL](#read-all-data-using-sql)
25+
- [Read all OneLake data and subscribe to events](#read-all-onelake-data-and-subscribe-to-events)
26+
- [Build reports on the default semantic models](#build-reports-on-the-default-semantic-models)
27+
- [Monitor queries](#monitor-queries)
28+
- [Audit queries](#audit-queries)
29+
- [Share granted permissions](#share-granted-permissions)
30+
31+
</details>
32+
33+
> `Data Warehouse` is a centralized repository for `storing large volumes of structured data`. It is optimized for querying and analysis, providing high-performance SQL-based analytics.
34+
35+
<div align="center">
36+
37+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/0a204dbf-af7a-434a-8265-65cc40fa4dc8" style="border: 2px solid #4CAF50; border-radius: 5px; padding: 5px;"/>
38+
39+
</div>
40+
41+
| **Permission** | **Definition** | **Use Cases** |
42+
|-----------------------------------------------|---------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
43+
| Read all data using SQL (`ReadData`) | Allows querying all data in the warehouse using SQL. | - `Power BI` or `Excel`: Running SQL queries for reporting.<br/>- `Data Factory`: Using SQL queries in pipelines.<br/>- `Custom Apps`: Querying warehouse data for dashboards or APIs. |
44+
| Read all OneLake data and subscribe to events (`ReadAll`, `SubscribeOneLakeEvents`) | Grants access to all data stored in OneLake and allows subscribing to data change events. | - `Data Pipelines`: Reading raw or curated data from OneLake.<br/>- `Event-driven Workflows`: Triggering actions when data changes.<br/>- `Monitoring Tools`: Subscribing to data refresh or ingestion events. |
45+
| Build reports on the default semantic model (`Build`) | Allows building and publishing reports using the default semantic model. | - `Power BI`: Creating dashboards and reports.<br/>- `Collaborative BI`: Sharing insights across teams.<br/>- `Embedded Analytics`: Integrating reports into apps or portals. |
46+
| Monitor queries (`Monitor`) | Enables visibility into query performance and execution. | - `Performance Tuning`: Identifying slow queries.<br/>- `Operational Monitoring`: Tracking query load and usage.<br/>- `Capacity Planning`: Understanding resource consumption. |
47+
| Audit queries (`Audit`) – PREVIEW | Allows auditing of query activity for compliance and governance. | - `Security Audits`: Reviewing who queried what and when.<br/>- `Compliance Reporting`: Ensuring data access policies are followed.<br/>- `Anomaly Detection`: Spotting unusual query patterns. |
48+
| Share granted permissions (`Reshare`) | Allows users to share permissions they’ve been granted with others. | - `Collaboration`: Delegating access to teammates.<br/>- `Data Stewardship`: Empowering trusted users to manage access.<br/>- `Self-service BI`: Enabling broader access without admin bottlenecks. |
49+
50+
<https://github.com/user-attachments/assets/ee3daf56-9aca-4321-b154-35cfbae05f65>
51+
52+
## Read all data using SQL
53+
54+
> Permissions:
55+
>
56+
> - Read <br/>
57+
> - Read Data
58+
59+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/a7e4b48d-cefb-447f-8f50-e4f1499444e3">
60+
61+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/6fc51fef-8fd9-4f5c-9b2d-2944e02a21de" />
62+
63+
> Here you can grant: <br/>
64+
>
65+
> - Reshare <br/>
66+
> - Build <br/>
67+
> - Write
68+
69+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/b4330145-f98e-40e0-b10b-441597749d45" />
70+
71+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/92283e55-0260-46b7-b683-12f50eb84e46" />
72+
73+
## Read all OneLake data and subscribe to events
74+
75+
> Permissions:
76+
>
77+
> - Read <br/>
78+
> - Read All <br/>
79+
> - Subscribe OneLake Events
80+
81+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/8f16dce7-aaf6-46c4-b5c6-b4f14bf88353">
82+
83+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/a368c386-4ada-411a-b83d-54222139e603" />
84+
85+
## Build reports on the default semantic models
86+
87+
> Permissions:
88+
>
89+
> - Read <br/>
90+
91+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/43d1685f-94ca-42fb-a1e3-29e49db63e75">
92+
93+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/fd9a4469-2447-44b0-a50b-c7e9d956770f" />
94+
95+
## Monitor queries
96+
97+
> Permissions:
98+
>
99+
> - Read <br/>
100+
> - Monitor
101+
102+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/06f59fbc-d595-4265-824b-469ca35fabea">
103+
104+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/50b22d07-9fcd-46d4-a1d3-d35061b74960">
105+
106+
## Audit queries
107+
108+
> Permissions:
109+
>
110+
> - Read <br/>
111+
> - Audit
112+
113+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/24aa044c-9afa-4748-8b43-141fde0d1a1a">
114+
115+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/e40c788b-8d0e-4a9e-9fbe-2afa87214a20">
116+
117+
## Share granted permissions
118+
119+
> Permissions:
120+
>
121+
> - Read <br/>
122+
> - Reshare
123+
124+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/2e526411-c109-440d-834d-cb9c3c81a31b">
125+
126+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/72e6c5b5-7946-436c-857a-88b69a074cfd">
127+
128+
<div align="center">
129+
<h3 style="color: #4CAF50;">Total Visitors</h3>
130+
<img src="https://profile-counter.glitch.me/brown9804/count.svg" alt="Visitor Count" style="border: 2px solid #4CAF50; border-radius: 5px; padding: 5px;"/>
131+
</div>

0 commit comments

Comments
 (0)