Microsoft Fabric Updates Blog

Announcing: Column-Level & Row-Level Security for Fabric Warehouse & SQL Endpoint

We are excited to announce the availability of Column-Level and Row-Level Security in Fabric Warehouse & SQL Endpoint in Public preview in all regions!

In today’s data-driven world, organizations are constantly collecting vast amounts of sensitive information that fuels their operations, decision-making processes, and competitive edge. While data accessibility is essential for business success, ensuring the confidentiality, integrity, and privacy of this information is equally critical. Enter Column-Level and Row-Level Security, two powerful data security strategies that tackle exactly these issues for your organization.

Column-Level security

Column-level security simplifies the design and coding of security in your application, allowing you to restrict column access to protect sensitive data. For example, ensuring that specific users can access only certain columns of a table pertinent to their department.
Access restrictions are managed within the Warehouse, ensuring that every time someone tries to access data from any part of the system, these restrictions are enforced. This approach enhances security by minimizing the potential weaknesses in your overall security system. In addition, column-level security also eliminates the need for introducing views to filter out columns for imposing access restrictions on the users.

Row-Level security

Row-Level Security enables you to use user accounts to control access to rows in a Warehouse or SQL Endpoint table. 

Row-Level Security (RLS) simplifies the design and coding of security in your application. RLS helps you implement restrictions on data row access. For example, you can ensure that workers access only those data rows that are pertinent to their department. Another example is to restrict customers’ data access to only the data relevant to their company.
The access rules are kept in the database, not in a different part of the application. The database enforces these rules whenever anyone tries to access data from any part of the system. This makes your security stronger and more dependable because it narrows down potential vulnerabilities in your security setup.

Implement RLS by using the CREATE SECURITY POLICY Transact-SQL statement, and predicates created as inline table-valued functions.

In Conclusion


We are very happy to announce the availability of Column-Level Security (CLS) and Row-Level Security (RLS) in Public Preview for Fabric Warehouse & SQL Endpoint. This will empower customers with precise control over their data access. Can’t wait to get started? Make sure you read up on the Documentation (RLS & CLS)


Related blog posts

Announcing: Column-Level & Row-Level Security for Fabric Warehouse & SQL Endpoint

September 26, 2024 by Jovan Popovic

We’ve improved the JSON support in Fabric Datawarehouse (Fabric DW) and have added the following features in Fabric DW: The JSON_PATH_EXIST function checks if there is a value on the given path in JSON text. The JSON_OBJECT and JSON_ARRAY functions enable you to more easily create JSON objects or arrays based on a set of … Continue reading “Announcing improved JSON support in Fabric DW”

September 26, 2024 by Jovan Popovic

Traditionally, warehouses are designed for smaller data types (numbers, dates, smaller strings) that are suitable for efficient analytics. Currently, Fabric DW has a limit that allows you to store string or binary data up to 8KB per cell. Increasing this limit has been one of the top requests for Fabric DW. We are excited to … Continue reading “Working with large data types in Fabric Warehouse”