skills.rest
wardawgmalvicious
wardawgmalviciousCOMMUNITY
Explore all skills by this author →
GitHub

fabric-security

Manage Fabric workspace roles, item permissions, OneLake security roles, and SQL granular permissions.

2|1|Updated May 5, 2026
Search Tags:#RLS#data access control#permission model#security enforcement#Fabric security
One-click install
npx skills add https://github.com/wardawgmalvicious/claude-config --skill fabric-security
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: fabric-security
Source: https://github.com/wardawgmalvicious/claude-config/tree/main/skills/fabric-security
Command: npx skills add https://github.com/wardawgmalvicious/claude-config --skill fabric-security

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps manage the Fabric security/permission model, covering various layers, principles, and enforcement mechanisms for data access control.

Core Features & Use Cases

  • Permission Layers: Admin/Member/Contributor/Viewer roles, item-level permissions, OneLake security roles, and SQL granular permissions.
  • Key Principles: Least-privilege patterns, bypass of RLS/CLS/DDM, and mode-dependent RLS/CLS enforcement.
  • Use Case: Implementing a Viewer role with SQL GRANT for least-privilege access or configuring Row-Level Security (RLS) for specific datasets.

Quick Start

Use the fabric-security skill to set up a least-privilege Viewer role with SQL GRANT for data access.

Frequently Asked Questions about fabric-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure Row-Level Security in Fabric for specific datasets?▼

Fabric security manages Row-Level Security (RLS) by applying mode-dependent enforcement policies and defining specific data access roles for datasets. This restricts data access at the row level based on user permissions.

What is the best way to implement least-privilege access for a Fabric Viewer role?▼

Implementing a least-privilege Viewer role in Fabric involves combining workspace Viewer permissions with SQL GRANT commands. This restricts users to only necessary data access, adhering strictly to least-privilege patterns.

Does Fabric security support bypassing RLS and CLS for certain administrators?▼

Fabric security includes principles for the bypass of RLS, CLS, and Dynamic Data Masking (DDM). This allows elevated administrators to override row-level and column-level security restrictions when necessary for data oversight.

How do Fabric workspace roles like Admin and Contributor affect data access control?▼

Fabric workspace roles including Admin, Member, Contributor, and Viewer define baseline data access control. These roles determine user capabilities and item management permissions within the workspace hierarchy.

Can I use SQL granular permissions alongside OneLake security roles in Fabric?▼

Yes, Fabric security manages both OneLake security data access roles and SQL granular permissions. You can layer these models to enforce comprehensive security across different data access endpoints.

Why does Fabric automatically create users when issuing a SQL GRANT statement?▼

Fabric handles user auto-creation on GRANT to streamline SQL granular permission management. This ensures the specified principal exists in the system before successfully applying new access rights.

Related Skills

Explore More Software Engineering Skills→
sitharaj88sitharaj88
1

aws-iam

Generate least-privilege AWS IAM policies, roles, users, and permission boundaries.

Community
Advanced
LerianStudioLerianStudio
205

ops-security-audit

Automate infrastructure security audits with phased scanning and compliance mapping.

Official
Advanced
duggal1duggal1
2

data-pipeline

Automates ETL/ELT workflows with counting, transformation, verification, and monitoring phases.

Community
Advanced
vivekganavivekgana
4

unity-catalog-governance

Configure Unity Catalog governance patterns, permissions, and policy enforcement in Databricks workspaces.

Community
Advanced