Skip to content

Commit dbff745

Browse files
brown9804brown9804
authored
Merge 337bd61 into d2ac9f9 
2 parents d2ac9f9 + 337bd61 commit dbff745

File tree

2 files changed

+126
-0
lines changed

2 files changed

+126
-0
lines changed

‎Security/README.md‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,7 @@ Last updated: 2025-05-08
1010
------------------------------------------
1111

1212
- [Lakehouse Permissions](./LakehousePermissions.md): Lakehouse, Semantic Model, SQL Endpoint
13+
- [Warehouse Permissions](./WarehousePermissions.md): Warehouse, Semantic Model
1314

1415
<div align="center">
1516
<h3 style="color: #4CAF50;">Total Visitors</h3>

‎Security/WarehousePermissions.md‎

Lines changed: 125 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,125 @@
1+
# Warehouse: Security \& Governance
2+
3+
Costa Rica
4+
5+
[![GitHub](https://img.shields.io/badge/--181717?logo=github&logoColor=ffffff)](https://github.com/)
6+
[brown9804](https://github.com/brown9804)
7+
8+
Last updated: 2025-05-08
9+
10+
------------------------------------------
11+
12+
<details>
13+
<summary><b>List of References</b> (Click to expand)</summary>
14+
15+
- [Security for data warehousing in Microsoft Fabric](https://learn.microsoft.com/en-us/fabric/data-warehouse/security)
16+
- [Permission model](https://learn.microsoft.com/en-us/fabric/security/permission-model)
17+
- [Share your data and manage permissions](https://learn.microsoft.com/en-us/fabric/data-warehouse/share-warehouse-manage-permissions)
18+
19+
</details>
20+
21+
<details>
22+
<summary><b>Table of Contents</b> (Click to expand)</summary>
23+
24+
- [Read all data using SQL](#read-all-data-using-sql)
25+
- [Read all OneLake data and subscribe to events](#read-all-onelake-data-and-subscribe-to-events)
26+
- [Build reports on the default semantic models](#build-reports-on-the-default-semantic-models)
27+
- [Monitor queries](#monitor-queries)
28+
- [Audit queries](#audit-queries)
29+
- [Share granted permissions](#share-granted-permissions)
30+
31+
</details>
32+
33+
> `Data Warehouse` is a centralized repository for `storing large volumes of structured data`. It is optimized for querying and analysis, providing high-performance SQL-based analytics.
34+
35+
<div align="center">
36+
37+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/0a204dbf-af7a-434a-8265-65cc40fa4dc8" style="border: 2px solid #4CAF50; border-radius: 5px; padding: 5px;"/>
38+
39+
</div>
40+
41+
| **Permission** | **Definition** | **Use Cases** |
42+
|-----------------------------------------------|---------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
43+
| Read all data using SQL (`ReadData`) | Allows querying all data in the warehouse using SQL. | - `Power BI` or `Excel`: Running SQL queries for reporting.<br/>- `Data Factory`: Using SQL queries in pipelines.<br/>- `Custom Apps`: Querying warehouse data for dashboards or APIs. |
44+
| Read all OneLake data and subscribe to events (`ReadAll`, `SubscribeOneLakeEvents`) | Grants access to all data stored in OneLake and allows subscribing to data change events. | - `Data Pipelines`: Reading raw or curated data from OneLake.<br/>- `Event-driven Workflows`: Triggering actions when data changes.<br/>- `Monitoring Tools`: Subscribing to data refresh or ingestion events. |
45+
| Build reports on the default semantic model (`Build`) | Allows building and publishing reports using the default semantic model. | - `Power BI`: Creating dashboards and reports.<br/>- `Collaborative BI`: Sharing insights across teams.<br/>- `Embedded Analytics`: Integrating reports into apps or portals. |
46+
| Monitor queries (`Monitor`) | Enables visibility into query performance and execution. | - `Performance Tuning`: Identifying slow queries.<br/>- `Operational Monitoring`: Tracking query load and usage.<br/>- `Capacity Planning`: Understanding resource consumption. |
47+
| Audit queries (`Audit`) – PREVIEW | Allows auditing of query activity for compliance and governance. | - `Security Audits`: Reviewing who queried what and when.<br/>- `Compliance Reporting`: Ensuring data access policies are followed.<br/>- `Anomaly Detection`: Spotting unusual query patterns. |
48+
| Share granted permissions (`Reshare`) | Allows users to share permissions they’ve been granted with others. | - `Collaboration`: Delegating access to teammates.<br/>- `Data Stewardship`: Empowering trusted users to manage access.<br/>- `Self-service BI`: Enabling broader access without admin bottlenecks. |
49+
50+
<https://github.com/user-attachments/assets/ee3daf56-9aca-4321-b154-35cfbae05f65>
51+
52+
## Read all data using SQL
53+
54+
> Permissions:
55+
> - Read <br/>
56+
> - Read Data
57+
58+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/a7e4b48d-cefb-447f-8f50-e4f1499444e3">
59+
60+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/6fc51fef-8fd9-4f5c-9b2d-2944e02a21de" />
61+
62+
63+
> Here you can grant: <br/>
64+
> - Reshare <br/>
65+
> - Build <br/>
66+
> - Write
67+
68+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/b4330145-f98e-40e0-b10b-441597749d45" />
69+
70+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/92283e55-0260-46b7-b683-12f50eb84e46" />
71+
72+
## Read all OneLake data and subscribe to events
73+
74+
> Permissions:
75+
> - Read <br/>
76+
> - Read All <br/>
77+
> - Subscribe OneLake Events
78+
79+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/8f16dce7-aaf6-46c4-b5c6-b4f14bf88353">
80+
81+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/a368c386-4ada-411a-b83d-54222139e603" />
82+
83+
## Build reports on the default semantic models
84+
85+
> Permissions:
86+
> - Read <br/>
87+
88+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/43d1685f-94ca-42fb-a1e3-29e49db63e75">
89+
90+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/fd9a4469-2447-44b0-a50b-c7e9d956770f" />
91+
92+
## Monitor queries
93+
94+
> Permissions:
95+
> - Read <br/>
96+
> - Monitor
97+
98+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/06f59fbc-d595-4265-824b-469ca35fabea">
99+
100+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/50b22d07-9fcd-46d4-a1d3-d35061b74960">
101+
102+
## Audit queries
103+
104+
> Permissions:
105+
> - Read <br/>
106+
> - Audit
107+
108+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/24aa044c-9afa-4748-8b43-141fde0d1a1a">
109+
110+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/e40c788b-8d0e-4a9e-9fbe-2afa87214a20">
111+
112+
## Share granted permissions
113+
114+
> Permissions:
115+
> - Read <br/>
116+
> - Reshare
117+
118+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/2e526411-c109-440d-834d-cb9c3c81a31b">
119+
120+
<img width="700" alt="image" src="https://github.com/user-attachments/assets/72e6c5b5-7946-436c-857a-88b69a074cfd">
121+
122+
<div align="center">
123+
<h3 style="color: #4CAF50;">Total Visitors</h3>
124+
<img src="https://profile-counter.glitch.me/brown9804/count.svg" alt="Visitor Count" style="border: 2px solid #4CAF50; border-radius: 5px; padding: 5px;"/>
125+
</div>

0 commit comments

Comments
 (0)