From a47332a6d44c6cc728bd951080def0323118ede4 Mon Sep 17 00:00:00 2001 From: Timna Brown <24630902+brown9804@users.noreply.github.com> Date: Thu, 8 May 2025 08:56:31 -0600 Subject: [PATCH 1/9] Warehouse Permissions - Shared workspace --- Security/WarehousePermissions.md | 60 ++++++++++++++++++++++++++++++++ 1 file changed, 60 insertions(+) create mode 100644 Security/WarehousePermissions.md diff --git a/Security/WarehousePermissions.md b/Security/WarehousePermissions.md new file mode 100644 index 0000000..e46d54a --- /dev/null +++ b/Security/WarehousePermissions.md @@ -0,0 +1,60 @@ +# Warehouse: Security \& Governance + +Costa Rica + +[![GitHub](https://img.shields.io/badge/--181717?logo=github&logoColor=ffffff)](https://github.com/) +[brown9804](https://github.com/brown9804) + +Last updated: 2025-05-08 + +------------------------------------------ + +
+List of References (Click to expand) + +- [Security for data warehousing in Microsoft Fabric](https://learn.microsoft.com/en-us/fabric/data-warehouse/security) +- [Permission model](https://learn.microsoft.com/en-us/fabric/security/permission-model) +- [Share your data and manage permissions](https://learn.microsoft.com/en-us/fabric/data-warehouse/share-warehouse-manage-permissions) + +
+ +
+Table of Contents (Click to expand) + +
+ +> `Data Warehouse` is a centralized repository for `storing large volumes of structured data`. It is optimized for querying and analysis, providing high-performance SQL-based analytics. + +
+ + image + +
+ +| **Permission** | **Definition** | **Use Cases** | +|-----------------------------------------------|---------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Read all data using SQL (`ReadData`) | Allows querying all data in the warehouse using SQL. | - `Power BI` or `Excel`: Running SQL queries for reporting.
- `Data Factory`: Using SQL queries in pipelines.
- `Custom Apps`: Querying warehouse data for dashboards or APIs. | +| Read all OneLake data and subscribe to events (`ReadAll`, `SubscribeOneLakeEvents`) | Grants access to all data stored in OneLake and allows subscribing to data change events. | - `Data Pipelines`: Reading raw or curated data from OneLake.
- `Event-driven Workflows`: Triggering actions when data changes.
- `Monitoring Tools`: Subscribing to data refresh or ingestion events. | +| Build reports on the default semantic model (`Build`) | Allows building and publishing reports using the default semantic model. | - `Power BI`: Creating dashboards and reports.
- `Collaborative BI`: Sharing insights across teams.
- `Embedded Analytics`: Integrating reports into apps or portals. | +| Monitor queries (`Monitor`) | Enables visibility into query performance and execution. | - `Performance Tuning`: Identifying slow queries.
- `Operational Monitoring`: Tracking query load and usage.
- `Capacity Planning`: Understanding resource consumption. | +| Audit queries (`Audit`) – PREVIEW | Allows auditing of query activity for compliance and governance. | - `Security Audits`: Reviewing who queried what and when.
- `Compliance Reporting`: Ensuring data access policies are followed.
- `Anomaly Detection`: Spotting unusual query patterns. | +| Share granted permissions (`Reshare`) | Allows users to share permissions they’ve been granted with others. | - `Collaboration`: Delegating access to teammates.
- `Data Stewardship`: Empowering trusted users to manage access.
- `Self-service BI`: Enabling broader access without admin bottlenecks. | + +https://github.com/user-attachments/assets/ee3daf56-9aca-4321-b154-35cfbae05f65 + +## Read all data using SQL + +## Read all OneLake data and subscribe to events + +## Build reports on the default semantic models + +## Monitor queries + +## Audit queries + +## Share granted permissions + +
+

Total Visitors

+ Visitor Count +
From 2339ab123c49e7ff0fe0f32ebd222523e400ae58 Mon Sep 17 00:00:00 2001 From: Timna Brown <24630902+brown9804@users.noreply.github.com> Date: Thu, 8 May 2025 08:57:39 -0600 Subject: [PATCH 2/9] added --- Security/README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/Security/README.md b/Security/README.md index 4187475..c3d5173 100644 --- a/Security/README.md +++ b/Security/README.md @@ -10,6 +10,7 @@ Last updated: 2025-05-08 ------------------------------------------ - [Lakehouse Permissions](./LakehousePermissions.md): Lakehouse, Semantic Model, SQL Endpoint +- [Warehouse Permissions](./WarehousePermissions.md): Warehouse, Semantic Model

Total Visitors

From 9eb7907458a40127f484633dc67a3c94c100e12c Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Thu, 8 May 2025 14:59:51 +0000 Subject: [PATCH 3/9] Fix Markdown syntax issues --- Security/WarehousePermissions.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Security/WarehousePermissions.md b/Security/WarehousePermissions.md index e46d54a..eb6525b 100644 --- a/Security/WarehousePermissions.md +++ b/Security/WarehousePermissions.md @@ -40,7 +40,7 @@ Last updated: 2025-05-08 | Audit queries (`Audit`) – PREVIEW | Allows auditing of query activity for compliance and governance. | - `Security Audits`: Reviewing who queried what and when.
- `Compliance Reporting`: Ensuring data access policies are followed.
- `Anomaly Detection`: Spotting unusual query patterns. | | Share granted permissions (`Reshare`) | Allows users to share permissions they’ve been granted with others. | - `Collaboration`: Delegating access to teammates.
- `Data Stewardship`: Empowering trusted users to manage access.
- `Self-service BI`: Enabling broader access without admin bottlenecks. | -https://github.com/user-attachments/assets/ee3daf56-9aca-4321-b154-35cfbae05f65 + ## Read all data using SQL From 2ade53d7b882d686e282c8f92927fb166ddf60dc Mon Sep 17 00:00:00 2001 From: Timna Brown <24630902+brown9804@users.noreply.github.com> Date: Thu, 8 May 2025 09:12:24 -0600 Subject: [PATCH 4/9] visual guidance --- Security/WarehousePermissions.md | 55 ++++++++++++++++++++++++++++++++ 1 file changed, 55 insertions(+) diff --git a/Security/WarehousePermissions.md b/Security/WarehousePermissions.md index eb6525b..6d8b821 100644 --- a/Security/WarehousePermissions.md +++ b/Security/WarehousePermissions.md @@ -21,6 +21,13 @@ Last updated: 2025-05-08
Table of Contents (Click to expand) +- [Read all data using SQL](#read-all-data-using-sql) +- [Read all OneLake data and subscribe to events](#read-all-onelake-data-and-subscribe-to-events) +- [Build reports on the default semantic models](#build-reports-on-the-default-semantic-models) +- [Monitor queries](#monitor-queries) +- [Audit queries](#audit-queries) +- [Share granted permissions](#share-granted-permissions) +
> `Data Warehouse` is a centralized repository for `storing large volumes of structured data`. It is optimized for querying and analysis, providing high-performance SQL-based analytics. @@ -44,16 +51,64 @@ Last updated: 2025-05-08 ## Read all data using SQL +> Permissions: +> - Read
+> - Read Data + +image + +image + ## Read all OneLake data and subscribe to events +> Permissions: +> - Read
+> - Read All
+> - Subscribe OneLake Events + +image + +image + ## Build reports on the default semantic models +> Permissions: +> - Read
+ +image + +image + ## Monitor queries +> Permissions: +> - Read
+> - Monitor + +image + +image + ## Audit queries +> Permissions: +> - Read
+> - Audit + +image + +image + ## Share granted permissions +> Permissions: +> - Read
+> - Reshare + +image + +image +

Total Visitors

Visitor Count From 337bd616dcb9e77ab4047211ba32ccb74eff5630 Mon Sep 17 00:00:00 2001 From: Timna Brown <24630902+brown9804@users.noreply.github.com> Date: Thu, 8 May 2025 09:15:59 -0600 Subject: [PATCH 5/9] addional guidance on smeantic model default one --- Security/WarehousePermissions.md | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/Security/WarehousePermissions.md b/Security/WarehousePermissions.md index 6d8b821..ee55057 100644 --- a/Security/WarehousePermissions.md +++ b/Security/WarehousePermissions.md @@ -59,6 +59,16 @@ Last updated: 2025-05-08 image + +> Here you can grant:
+> - Reshare
+> - Build
+> - Write + +image + +image + ## Read all OneLake data and subscribe to events > Permissions: From a2ff46b878351376d452639d0ad9c6159c4133c8 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Thu, 8 May 2025 15:18:12 +0000 Subject: [PATCH 6/9] Fix Markdown syntax issues --- Security/WarehousePermissions.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/Security/WarehousePermissions.md b/Security/WarehousePermissions.md index ee55057..db33ceb 100644 --- a/Security/WarehousePermissions.md +++ b/Security/WarehousePermissions.md @@ -52,6 +52,7 @@ Last updated: 2025-05-08 ## Read all data using SQL > Permissions: +> > - Read
> - Read Data @@ -59,8 +60,8 @@ Last updated: 2025-05-08 image - > Here you can grant:
+> > - Reshare
> - Build
> - Write @@ -72,6 +73,7 @@ Last updated: 2025-05-08 ## Read all OneLake data and subscribe to events > Permissions: +> > - Read
> - Read All
> - Subscribe OneLake Events @@ -83,6 +85,7 @@ Last updated: 2025-05-08 ## Build reports on the default semantic models > Permissions: +> > - Read
image @@ -92,6 +95,7 @@ Last updated: 2025-05-08 ## Monitor queries > Permissions: +> > - Read
> - Monitor @@ -102,6 +106,7 @@ Last updated: 2025-05-08 ## Audit queries > Permissions: +> > - Read
> - Audit @@ -112,6 +117,7 @@ Last updated: 2025-05-08 ## Share granted permissions > Permissions: +> > - Read
> - Reshare From ba003120fe9a0bf0074d1b54067a377152527129 Mon Sep 17 00:00:00 2001 From: Timna Brown <24630902+brown9804@users.noreply.github.com> Date: Thu, 8 May 2025 09:20:31 -0600 Subject: [PATCH 7/9] semantic models also --- Security/README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/Security/README.md b/Security/README.md index c3d5173..f58672d 100644 --- a/Security/README.md +++ b/Security/README.md @@ -11,6 +11,7 @@ Last updated: 2025-05-08 - [Lakehouse Permissions](./LakehousePermissions.md): Lakehouse, Semantic Model, SQL Endpoint - [Warehouse Permissions](./WarehousePermissions.md): Warehouse, Semantic Model +- [Semantic Models Permissions](./SemanticModelsPermissions.md): Semantic Models

Total Visitors

From 87f2905fa5c732aed5d466ed84a2fd8bc2ff6cee Mon Sep 17 00:00:00 2001 From: Timna Brown <24630902+brown9804@users.noreply.github.com> Date: Thu, 8 May 2025 09:28:10 -0600 Subject: [PATCH 8/9] semantic models also --- Security/SemanticModelsPermissions.md | 46 +++++++++++++++++++++++++++ 1 file changed, 46 insertions(+) create mode 100644 Security/SemanticModelsPermissions.md diff --git a/Security/SemanticModelsPermissions.md b/Security/SemanticModelsPermissions.md new file mode 100644 index 0000000..bb3d414 --- /dev/null +++ b/Security/SemanticModelsPermissions.md @@ -0,0 +1,46 @@ +# Semantic Models: Security \& Governance + +Costa Rica + +[![GitHub](https://img.shields.io/badge/--181717?logo=github&logoColor=ffffff)](https://github.com/) +[brown9804](https://github.com/brown9804) + +Last updated: 2025-05-08 + +------------------------------------------ + +
+List of References (Click to expand) + +- [OneLake data access control model (preview)](https://learn.microsoft.com/en-us/fabric/onelake/security/data-access-control-model) +- [Permission model](https://learn.microsoft.com/en-us/fabric/security/permission-model) +- [Manage Direct Lake semantic models](https://learn.microsoft.com/en-us/fabric/fundamentals/direct-lake-manage) + +
+ + +> Semantic Model is a `curated layer` that provides a `business-friendly view of data`. It abstracts complex data structures into understandable entities, measures, and relationships, enabling users to create reports and perform analysis without needing to write complex queries. E.g `custom data view`. + +
+ + image + +
+ +
+ + image + +
+ +| **Permission** | **Definition** | **Use Cases** | +|----------------------------------------------------------------------|------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------| +| Allow recipients to modify this dataset | Grants users the ability to make changes to the semantic model, including schema and data updates. | - `Data Modeling`: Adjusting measures, columns, or relationships.
- `Collaboration`: Co-authoring datasets with team members. | +| Allow recipients to share this semantic model | Lets users share the semantic model with others. | - `Team Access`: Granting access to additional users.
- `Self-service BI`: Empowering users to manage access without admin intervention. | +| Allow recipients to build content with the data associated with this semantic model | Enables users to create reports, dashboards, and other content using the semantic model. | - `Power BI Reports`: Building visuals and dashboards.
- `Embedded Analytics`: Using the model in apps or portals.
- `Ad hoc Analysis`: Exploring data. | +| Send an email notification | Sends an email to notify the recipient about the access granted. | - `Communication`: Ensuring users are informed of their new access.
- `Onboarding`: Helping users get started with the semantic model. | + +
+

Total Visitors

+ Visitor Count +
From 412c2ce8c886c47c82a8469d63f05e8c407e4ba4 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Thu, 8 May 2025 15:28:30 +0000 Subject: [PATCH 9/9] Fix Markdown syntax issues --- Security/SemanticModelsPermissions.md | 1 - 1 file changed, 1 deletion(-) diff --git a/Security/SemanticModelsPermissions.md b/Security/SemanticModelsPermissions.md index bb3d414..ffa72bf 100644 --- a/Security/SemanticModelsPermissions.md +++ b/Security/SemanticModelsPermissions.md @@ -18,7 +18,6 @@ Last updated: 2025-05-08 - > Semantic Model is a `curated layer` that provides a `business-friendly view of data`. It abstracts complex data structures into understandable entities, measures, and relationships, enabling users to create reports and perform analysis without needing to write complex queries. E.g `custom data view`.