Secure Data
Implement security controls, access management, and compliance
Access Control
Manage access to data and resources:
Workspace Permissions - Admin, Member, Contributor, Viewer roles - Item-level permissions (Read, Reshare, Build) - Share individual items without workspace access
Lakehouse Security - SQL endpoint security with T-SQL GRANT statements - Row-level security (RLS) for fine-grained access - Column-level security for sensitive data
OneLake Security - Inherits workspace permissions - Support for ACLs at folder/file level - Integration with Microsoft Entra ID
Data Protection
Protect sensitive data:
Microsoft Purview Integration - Sensitivity labels for classification - Label inheritance across Fabric items - Protection policies for export control
Encryption - Data encrypted at rest by default - Customer-managed keys (CMK) support - Encryption in transit (TLS 1.2+)
Private Connectivity - Managed private endpoints - VNet integration for secure access - Private Link for secure connectivity
Compliance and Auditing
Meet compliance requirements:
Audit Logging - Track user activities across Fabric - Export audit logs for analysis - Retention policies for audit data
Data Residency - Choose region for data storage - Understand data movement boundaries
Certifications - SOC 2, ISO 27001, HIPAA BAA, GDPR compliance - Review compliance documentation for requirements