Question 150
A reporting team is validating the following scenario: A semantic model uses a fixed cloud connection identity and an architect assumes every reader's SQL RLS is applied automatically. Which action addresses the primary cause?
Explanation
Correct Answer
Fixed identity and single sign-on yield different security evaluation behavior. The recommended action directly addresses the stated requirement.
Incorrect Answers
This action is appropriate when a report consumer has Build permission but cannot connect to a protected source lakehouse. Build authorizes model reuse, not necessarily read rights on separate source items. However, the question instead requires Verify the effective connection identity and model security before assuming delegated per-user filtering. because fixed identity and single sign-on yield different security evaluation behavior.
This action is appropriate when a team combines OneLake table access rules and semantic RLS and sees unexpected effective filters. Layered security can create compounded restrictions that require end-to-end verification. However, the question instead requires Verify the effective connection identity and model security before assuming delegated per-user filtering. because fixed identity and single sign-on yield different security evaluation behavior.
This action is appropriate when a user can query a warehouse via SQL but receives an error opening its semantic model. Source SQL permissions do not automatically establish access to a separate semantic model item. However, the question instead requires Verify the effective connection identity and model security before assuming delegated per-user filtering. because fixed identity and single sign-on yield different security evaluation behavior.






Implementing Analytics Solutions Using Microsoft Fabric (DP-600) Practice Tests