Question 80
An engineer needs to choose the most defensible Fabric solution for this condition: A model author sees full data while a Viewer only sees an authorized subset. Which approach is MOST appropriate?
Explanation
Correct Answer
Effective row visibility can differ by principal even on a shared model. The recommended action directly addresses the stated requirement.
Incorrect Answers
This action is appropriate when a semantic model uses a fixed cloud connection identity and an architect assumes every reader's SQL RLS is applied automatically. Fixed identity and single sign-on yield different security evaluation behavior. However, the question instead requires Verify the consuming identity's RLS and OneLake security roles. because effective row visibility can differ by principal even on a shared model.
This action is appropriate when a report consumer has Build permission but cannot connect to a protected source lakehouse. Build authorizes model reuse, not necessarily read rights on separate source items. However, the question instead requires Verify the consuming identity's RLS and OneLake security roles. because effective row visibility can differ by principal even on a shared model.
This action is appropriate when a team combines OneLake table access rules and semantic RLS and sees unexpected effective filters. Layered security can create compounded restrictions that require end-to-end verification. However, the question instead requires Verify the consuming identity's RLS and OneLake security roles. because effective row visibility can differ by principal even on a shared model.






Implementing Analytics Solutions Using Microsoft Fabric (DP-600) Practice Tests