Question 290
A Fabric administrator receives the following requirement: A team combines OneLake table access rules and semantic RLS and sees unexpected effective filters. What should the engineer do?
Explanation
Correct Answer
Layered security can create compounded restrictions that require end-to-end verification. The recommended action directly addresses the stated requirement.
Incorrect Answers
This action is appropriate when a model author sees full data while a Viewer only sees an authorized subset. Effective row visibility can differ by principal even on a shared model. However, the question instead requires Test the intersection of effective model restrictions and OneLake security for each principal. because layered security can create compounded restrictions that require end-to-end verification.
This action is appropriate when a semantic model uses a fixed cloud connection identity and an architect assumes every reader's SQL RLS is applied automatically. Fixed identity and single sign-on yield different security evaluation behavior. However, the question instead requires Test the intersection of effective model restrictions and OneLake security for each principal. because layered security can create compounded restrictions that require end-to-end verification.
This action is appropriate when a user can query a warehouse via SQL but receives an error opening its semantic model. Source SQL permissions do not automatically establish access to a separate semantic model item. However, the question instead requires Test the intersection of effective model restrictions and OneLake security for each principal. because layered security can create compounded restrictions that require end-to-end verification.






Implementing Analytics Solutions Using Microsoft Fabric (DP-600) Practice Tests