Merge pull request #22 from MicrosoftCloudEssentials-LearningHub/workspace-roles

Event Stream + Healthcare data solutions

Author: brown9804

Security/CopyJobPermissions.md

@@ -9,7 +9,6 @@ Last updated: 2025-05-08
 
 ------------------------------------------
 
-
 > `Copy Job` in Microsoft Fabric is a `data movement operation` that enables users to transfer data from one location to another within the Fabric ecosystem or from external sources. It supports a wide range of connectors and formats, allowing seamless ingestion into `OneLake`, `Data Warehouses`, or `Lakehouses`. Copy Jobs are ideal for `ETL/ELT workflows, data onboarding, and integration scenarios`, providing a scalable and efficient way to automate data loading and refresh processes across environments.
 
 <details>
@@ -30,7 +29,7 @@ Last updated: 2025-05-08
 
 > [!IMPORTANT]
 > `Workspace roles in Microsoft Fabric (Admin, Member, Contributor, Viewer) grant access to all items within the workspace, not just Copy Jobs.` This includes Dashboards,
->  Semantic Models, Data Warehouses, Notebooks, Pipelines, and more. There is currently no way to assign permissions to Copy Jobs individually, access is inherited from the user's role in the workspace.
+> Semantic Models, Data Warehouses, Notebooks, Pipelines, and more. There is currently no way to assign permissions to Copy Jobs individually, access is inherited from the user's role in the workspace.
 
 | **Workspace Role** | **Access to Copy Jobs**                                                                 |
 |--------------------|------------------------------------------------------------------------------------------|
@@ -39,7 +38,6 @@ Last updated: 2025-05-08
 | **Contributor**    | Can create and run Copy Jobs, but cannot manage permissions or share them.               |
 | **Viewer**         | Can view Copy Jobs and their status but cannot create, edit, or run them.                |
 
-
 <img width="700" alt="image" src="https://github.com/user-attachments/assets/93ccd9f1-a650-4663-a631-3b2b20434cae" />
 
 <img width="700" alt="image" src="https://github.com/user-attachments/assets/ce0bcfe1-cce2-45e9-81ee-c58e89a7f089" />

Security/DashboardPermissions.md

@@ -9,7 +9,6 @@ Last updated: 2025-05-08
 
 ------------------------------------------
 
-
 > `Dashboard` in Microsoft Fabric is a `visual and interactive canvas` that brings together insights from various data sources into a single,
 > unified view. It allows users to pin visuals from reports, monitor key metrics in real time, and interact with data through filters and slicers.
 > Dashboards are ideal for `executive overviews, operational monitoring, and decision-making`, offering a high-level summary with the ability to drill down into detailed reports when needed.
@@ -35,6 +34,7 @@ Last updated: 2025-05-08
 ## Allow recipients to share this dashboard 
 
 > Permission: <br/>
+>
 > - Read <br/>
 > - Reshare 
 
@@ -45,6 +45,7 @@ Last updated: 2025-05-08
 ## Allow recipients to build content with the data associated with this dashboard 
 
 > Permission: <br/>
+>
 > - Read 
 
 <img width="700" alt="image" src="https://github.com/user-attachments/assets/aee8ab34-4eab-47e2-8509-5773c2173b3a" />

Security/EventStreamPermissions.md

@@ -0,0 +1,54 @@
+# Event Stream: Security \& Governance
+
+Costa Rica
+
+[![GitHub](https://img.shields.io/badge/--181717?logo=github&logoColor=ffffff)](https://github.com/)
+[brown9804](https://github.com/brown9804)
+
+Last updated: 2025-05-08
+
+------------------------------------------
+
+> `Event Stream` in Microsoft Fabric is a `real-time data ingestion and processing service` that enables users to capture, transform, and route streaming data from various sources. It supports inputs like `Event Hubs`, `IoT devices`, and `custom applications`, and allows routing data to destinations such as `OneLake`, `Data Warehouses`, or `Lakehouses`. Event Streams are ideal for `real-time analytics, monitoring, and alerting scenarios`, providing a scalable and low-latency pipeline for continuously processing and reacting to incoming data events.
+
+<details>
+<summary><b>List of References</b> (Click to expand)</summary>
+
+- [Fabric Eventstream - overview](https://learn.microsoft.com/en-us/fabric/real-time-intelligence/event-streams/overview?tabs=enhancedcapabilities)
+- [Manage an eventstream in Microsoft Fabric](https://learn.microsoft.com/en-us/fabric/real-time-intelligence/event-streams/manage-eventstream)
+
+</details>
+
+> [!NOTE]
+> As now, access to Event Stream is controlled `entirely through workspace roles (Admin, Member, Contributor, Viewer).`
+> `There is no support for assigning permissions to individual Event Stream` or managing them through SQL-like GRANT, REVOKE, or DENY statements.
+
+<div align="center">
+  <img width="700" alt="image" src="https://github.com/user-attachments/assets/66b7a6ec-12fb-4f22-af45-fd481caa3f30" style="border: 2px solid #4CAF50; border-radius: 5px; padding: 5px;"/>
+</div>
+
+<div align="center">
+  <img width="700" alt="image" src="https://github.com/user-attachments/assets/1f88430b-8caa-438a-88d8-9675ae461af7" style="border: 2px solid #4CAF50; border-radius: 5px; padding: 5px;"/>
+</div>
+
+> [!IMPORTANT]
+> `Workspace roles in Microsoft Fabric (Admin, Member, Contributor, Viewer) grant access to all items within the workspace, not just Event Stream.` This includes Dashboards,
+> Semantic Models, Data Warehouses, Notebooks, Pipelines, and more. There is currently no way to assign permissions to Event Stream individually, access is inherited from the user's role in the workspace.
+
+| **Workspace Role** | **Access to Event Stream**                                                                 |
+|--------------------|------------------------------------------------------------------------------------------|
+| **Admin**          | Full control: create, edit, delete, monitor, and manage permissions for Event Stream.       |
+| **Member**         | Can create, edit, and run Event Stream; can also share them with others.                    |
+| **Contributor**    | Can create and run Event Stream, but cannot manage permissions or share them.               |
+| **Viewer**         | Can view Event Stream and their status but cannot create, edit, or run them.                |
+
+<img width="700" alt="image" src="https://github.com/user-attachments/assets/93ccd9f1-a650-4663-a631-3b2b20434cae" />
+
+<img width="700" alt="image" src="https://github.com/user-attachments/assets/ce0bcfe1-cce2-45e9-81ee-c58e89a7f089" />
+
+<img width="500" alt="image" src="https://github.com/user-attachments/assets/097cb406-b4c8-4d49-88c2-6d4ea8cf7294" />
+
+<div align="center">
+  <h3 style="color: #4CAF50;">Total Visitors</h3>
+  <img src="https://profile-counter.glitch.me/brown9804/count.svg" alt="Visitor Count" style="border: 2px solid #4CAF50; border-radius: 5px; padding: 5px;"/>
+</div>

Security/HealthcareDataSolutionsPermissions.md

@@ -0,0 +1,54 @@
+# Healthcare Data Solutions: Security \& Governance
+
+Costa Rica
+
+[![GitHub](https://img.shields.io/badge/--181717?logo=github&logoColor=ffffff)](https://github.com/)
+[brown9804](https://github.com/brown9804)
+
+Last updated: 2025-05-08
+
+------------------------------------------
+
+> `Healthcare Data Solution` in Microsoft Fabric is a `comprehensive and secure framework` designed to manage, integrate, and analyze healthcare data across various systems. It enables seamless data movement and transformation using tools like Copy Jobs, Pipelines, and Event Streams, supporting ingestion into `OneLake`, `Data Warehouses`, or `Lakehouses`. Healthcare Data Solutions are ideal for `clinical data integration, regulatory reporting, population health analytics, and interoperability`, providing a scalable and compliant foundation for delivering insights and improving patient outcomes.
+
+<details>
+<summary><b>List of References</b> (Click to expand)</summary>
+
+- [Overview of healthcare data solutions in Microsoft Fabric](https://learn.microsoft.com/en-us/industry/healthcare/healthcare-data-solutions/overview)
+- [Compliance and security in healthcare data solutions in Microsoft Fabric](https://learn.microsoft.com/en-us/industry/healthcare/healthcare-data-solutions/compliance?toc=%2Findustry%2Fhealthcare%2Ftoc.json&bc=%2Findustry%2Fbreadcrumb%2Ftoc.json)
+
+</details>
+
+> [!NOTE]
+> `There is currently no support for assigning permissions to individual Healthcare Data Solutions`, nor can access be managed using SQL-like `GRANT`, `REVOKE`, or `DENY` statements.  
+> For healthcare organizations handling regulated data (e.g., PHI or clinical records), it's essential to structure workspaces carefully and apply role-based access control (RBAC) at the workspace level to maintain compliance and data governance.
+
+<div align="center">
+  <img width="700" alt="image" src="https://github.com/user-attachments/assets/6f3a21b9-a38e-438d-821b-9e4fe73bf3b7" style="border: 2px solid #4CAF50; border-radius: 5px; padding: 5px;"/>
+</div>
+
+<div align="center">
+  <img width="700" alt="image" src="https://github.com/user-attachments/assets/25dede78-ef39-497c-a9da-3d86d9ad24f7" style="border: 2px solid #4CAF50; border-radius: 5px; padding: 5px;"/>
+</div>
+
+> [!IMPORTANT]
+> `Workspace roles in Microsoft Fabric (Admin, Member, Contributor, Viewer) grant access to all items within the workspace, not just Healthcare Data Solutions.` This includes Dashboards,
+> Semantic Models, Data Warehouses, Notebooks, Pipelines, and more. There is currently no way to assign permissions to Healthcare Data Solutions individually, access is inherited from the user's role in the workspace.
+
+| **Workspace Role** | **Access to Healthcare Data Solutions**                                                                 |
+|--------------------|------------------------------------------------------------------------------------------|
+| **Admin**          | Full control: create, edit, delete, monitor, and manage permissions for Healthcare Data Solutions.       |
+| **Member**         | Can create, edit, and run Healthcare Data Solutions; can also share them with others.                    |
+| **Contributor**    | Can create and run Healthcare Data Solutions, but cannot manage permissions or share them.               |
+| **Viewer**         | Can view Healthcare Data Solutions and their status but cannot create, edit, or run them.                |
+
+<img width="700" alt="image" src="https://github.com/user-attachments/assets/93ccd9f1-a650-4663-a631-3b2b20434cae" />
+
+<img width="700" alt="image" src="https://github.com/user-attachments/assets/ce0bcfe1-cce2-45e9-81ee-c58e89a7f089" />
+
+<img width="500" alt="image" src="https://github.com/user-attachments/assets/097cb406-b4c8-4d49-88c2-6d4ea8cf7294" />
+
+<div align="center">
+  <h3 style="color: #4CAF50;">Total Visitors</h3>
+  <img src="https://profile-counter.glitch.me/brown9804/count.svg" alt="Visitor Count" style="border: 2px solid #4CAF50; border-radius: 5px; padding: 5px;"/>
+</div>

Security/LakehousePermissions.md

@@ -72,10 +72,8 @@ Last updated: 2025-05-08
 
 <img width="800" alt="image" src="https://github.com/user-attachments/assets/88691b89-1356-49a1-9945-8ec82c21ae3a">
 
-
 <img width="800" alt="image" src="https://github.com/user-attachments/assets/124e1a5f-728f-4360-bdeb-3e4b86fe33bd">
 
-
 ## Lakehouse Semantic Model
 
 > Permissions:

Security/README.md

@@ -14,8 +14,10 @@ Last updated: 2025-05-08
 - [Semantic Models Permissions](./SemanticModelsPermissions.md): Semantic Models
 - [Dashboards Permissions](./DashboardPermissions.md): Dashboards
 - [Copy Job Permissions](./CopyJobPermissions.md): Copy Job
-- [Data Pipelines Permissions](./DataPipelinesPermissions.md): Data Pipelines 
-
+- [Data Pipelines Permissions](./DataPipelinesPermissions.md): Data Pipelines
+- [Event Stream Permissions](./EventStreamPermissions.md): Event Stream
+- [Healthcare data solutions Permissions](./HealthcareDataSolutionsPermissions.md): Healthcare Data Solutions
+  
 <div align="center">
   <h3 style="color: #4CAF50;">Total Visitors</h3>
   <img src="https://profile-counter.glitch.me/brown9804/count.svg" alt="Visitor Count" style="border: 2px solid #4CAF50; border-radius: 5px; padding: 5px;"/>