Edit

Secure your Fabric data

Use the OneLake catalog's Secure tab to view, monitor, and configure security roles across workspaces and items in Microsoft Fabric. It centralizes in one place:

  • A view of workspace roles and permissions, for auditing access to workspaces and data.

  • A view of OneLake security roles across workspaces and item types. Admins can create, edit, or delete OneLake security roles from a single location.

The Secure tab shows you the items that are relevant to you, including which workspaces you have access to. Admin and Member roles are required in a workspace to see data for that workspace. Contributors or Viewers in a workspace only see information about their own access.

View users

On the View users page, you can see all of the users with access to selected workspaces, including a summary of their assigned roles.

  1. To get started, choose the workspaces from the Workspaces control on the left.
  2. Each row represents a unique user, group, or application and shows a count of the roles they have in the selected workspaces.
  3. Use the All users by filter at the top to limit your selection to specific types of user, workspace roles, or workspaces.
  4. Use the search control to find a specific user or group and verify their permissions.

Manage workspace permissions

Using the ribbon on the View uers page, you can manage workspace role assignments across multiple workspaces from a single experience.

  • Add users: Select this option to add one or more users to the same workspace role across one or more workspaces. For example, you can onboard all new hires to the Viewer role across all relevant workspaces.
  • Manage access: Select this to choose between editing roles and removing roles. Like with add users, you can perform these actions in bulk across multiple users and workspaces. For example, removing all summer interns from their relevant workspaces.

To manage workspace permissions, select the Add users or Manage access option you want.

  • Under Workspaces, select one or more workspaces where you want the user to be updated. Note that you must have Admin or Member permissions on a workspace for the update to apply.
  • For Members, search for the users or groups you want to update.
  • Select the Role you are granting or updating them to. This option is not present for removing access.
  • Select Update.
  • To cancel the changes, select Discard.

View security roles

On the View security roles page, you can see all of the OneLake security roles across the selected workspaces. Each item that has a OneLake security role in those workspaces appears in the list. You can view existing roles, edit roles, delete roles, or create new ones from this page.

View and edit an existing role

  1. Open View security roles in the OneLake catalog.

  2. Choose the workspaces from the Workspaces control on the left.

  3. Each row represents a single OneLake security role that's inside a Fabric item. You can view the following details for a role:

    • Item name
    • Role name
    • Role type - only OneLake security roles are supported
    • Permission - the permission granted by the role
    • Location - the workspace where the item lives
    • Data owner - the owner of the item

  4. Select a role to open the OneLake security role management experience.

  5. You can view and edit the Data in role and Members in role in the role details page. For more information about viewing and editing a OneLake security role, see Create and manage OneLake security roles.

Delete a role

  1. Open View security roles in the OneLake catalog.
  2. Choose the workspaces from the Workspaces control on the left.
  3. Select a role to open the OneLake security role management experience.
  4. In the control bar at the top, select Delete.
  5. Select Delete to confirm the deletion, or Cancel to return to the previous screen.

Create a new role

  1. Open View security roles in the OneLake catalog.
  2. Choose the workspaces from the Workspaces control on the left.
  3. Select a role to open the OneLake security role management experience.
  4. Use the control bar at the top to create a new role with New role or Duplicate an existing role. The role is created in the item where the currently selected role lives. To change to a different item, select a OneLake security role for that item.

Related content

  • Last updated on