Skip to content

Commit 9471d46

Browse files
brown9804brown9804
authored
alright overview in place
1 parent 72b065f commit 9471d46

File tree

1 file changed

+93
-0
lines changed

1 file changed

+93
-0
lines changed

‎Security/LakehousePermissions.md‎

Lines changed: 93 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,93 @@
1+
# Lakehouse: Security \& Governance
2+
3+
Costa Rica
4+
5+
[![GitHub](https://img.shields.io/badge/--181717?logo=github&logoColor=ffffff)](https://github.com/)
6+
[brown9804](https://github.com/brown9804)
7+
8+
Last updated: 2025-05-08
9+
10+
------------------------------------------
11+
12+
<details>
13+
<summary><b>List of References</b> (Click to expand)</summary>
14+
15+
- [Workspace roles in Lakehouse](https://learn.microsoft.com/en-us/fabric/data-engineering/workspace-roles-lakehouse)
16+
- [How lakehouse sharing works](https://learn.microsoft.com/en-us/fabric/data-engineering/lakehouse-sharing)
17+
18+
</details>
19+
20+
21+
<details>
22+
<summary><b>Table of Contents</b> (Click to expand)</summary>
23+
24+
- [Read all SQL endpoint data](#read-all-sql-endpoint-data)
25+
- [Lakehouse Semantic Model](#lakehouse-semantic-model)
26+
- [SQL Analytics Endpoint](#sql-analytics-endpoint)
27+
28+
</details>
29+
30+
31+
> `Lakehouse `is a `specific type of data architecture within Microsoft Fabric `that combines the features of data lakes and data warehouses. `It allows for the storage and processing of both structured and unstructured data`, providing the flexibility of a data lake with the performance and management features of a data warehouse. <br/> <br/>
32+
33+
<div align="center">
34+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/fd102034-660b-4f93-8aa1-ccda4e4d1893" style="border: 2px solid #4CAF50; border-radius: 5px; padding: 5px;"/>
35+
</div>
36+
37+
| **Permission** | **Definition** | **Use Cases** |
38+
|-----------------------------------------------|---------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
39+
| Read all SQL endpoint data | This permission allows access to SQL-based data endpoints in Microsoft Fabric. | - `Power BI`: Connecting to semantic models or datasets using DirectQuery or Import mode.<br/>- `Data Factory Pipelines`: Reading from or writing to SQL endpoints as part of ETL/ELT processes.<br/>- `OneLake / Gen2 Data Lake`: SQL endpoints can expose structured views over data stored in the lake.<br/>- `Data Activator / Agents`: Agents may use SQL endpoints to monitor or trigger actions based on data changes.<br/>- `Excel / Office Integration`: Connecting Excel to SQL endpoints for live data refresh and pivot analysis.<br/>- `Third-party BI Tools`: Using Tableau, Qlik, etc., to connect to SQL endpoints.<br/>- `Custom Applications`: Internal apps querying SQL endpoints for real-time dashboards. |
40+
| Read all Apache Spark and subscribe to events | This permission relates to Apache Spark workloads, which are more code- and compute-intensive. | - `Notebooks`: Running PySpark, Scala, or SparkSQL code for data exploration and transformation.<br/>- `Machine Learning`: Training models using Spark MLlib or integrating with Azure ML.<br/>- `Data Science Workloads`: Performing large-scale data analysis or feature engineering.<br/>- `Copilot & Agents`: If they need to interact with Spark jobs or listen to Spark events (e.g., job completion).<br/>- `Streaming Analytics`: Real-time data processing using Spark Structured Streaming.<br/>- `Data Engineering Pipelines`: Complex transformations and joins across large datasets.<br/>- `Event-Driven Automation`: Triggering workflows or alerts based on Spark job events.<br/>- `Integration with Delta Lake`: Managing transactional data lakes with ACID guarantees. |
41+
42+
https://github.com/user-attachments/assets/2974bdee-4b02-4750-ba6c-b745215e0f82
43+
44+
### Read all SQL endpoint data
45+
46+
> Permissions:
47+
> - Read <br/>
48+
> - Read All <br/>
49+
> - Subscribe OneLake Events
50+
51+
52+
> Lakehouse Manage Permissions:
53+
54+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/a2559d8a-35b9-456b-a14c-81c9bb5d2b9c" /> |
55+
56+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/2f0c625d-2cbb-43c0-930a-a2ee29eff60f" />
57+
58+
> When `Read all SQL endpoint data`:
59+
60+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/19a31eaf-79e6-4836-a380-75137823e315" />
61+
62+
> `Read` access is granted, you add more permissions.
63+
64+
<img width="800" alt="image" src="https://github.com/user-attachments/assets/2035ae73-f247-493d-905c-d9a3d76ec5f2" />
65+
66+
67+
### Lakehouse Semantic Model
68+
69+
> Permissions:
70+
> - Reshare <br/>
71+
> - Build <br/>
72+
> - Write
73+
74+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/f767acdc-6491-4576-a99e-337cf6f2b37c" />
75+
76+
<img width="800" alt="image" src="https://github.com/user-attachments/assets/a574988f-f78c-43be-b29c-150f67599386">
77+
78+
### SQL Analytics Endpoint
79+
80+
> Permissions:
81+
> - Read <br/>
82+
> - Read Data <br/>
83+
> - Read All
84+
85+
<img width="550" alt="image" src="https://github.com/user-attachments/assets/969433d1-5ceb-4369-a11f-26a29bb606dd" />
86+
87+
<img width="800" alt="image" src="https://github.com/user-attachments/assets/60241837-759f-44f6-8934-67bb98002ada" />
88+
89+
<div align="center">
90+
<h3 style="color: #4CAF50;">Total Visitors</h3>
91+
<img src="https://profile-counter.glitch.me/brown9804/count.svg" alt="Visitor Count" style="border: 2px solid #4CAF50; border-radius: 5px; padding: 5px;"/>
92+
</div>
93+

0 commit comments

Comments
 (0)