How to: Secure data Microsoft Fabric mirrored databases from Snowflake

This guide helps you establish data security in your mirrored Snowflake in Microsoft Fabric.

Security considerations

To enable Fabric mirroring, you will need user permissions for your Snowflake database that contains the following permissions:

  • CREATE STREAM
  • SELECT table
  • SHOW tables
  • DESCRIBE tables

For more information, see Snowflake documentation on Access Control Privileges for Streaming tables and Required Permissions for Streams.

Important

Any granular security established in the source Snowflake database must be re-configured in the mirrored database in Microsoft Fabric. For more information, see SQL granular permissions in Microsoft Fabric.

Data protection features

You can secure column filters and predicate-based row filters on tables to roles and users in Microsoft Fabric:

You can also mask sensitive data from non-admins using dynamic data masking: