Exam DP-600 topic 1 question 68 discussion

Actual exam question from Microsoft's DP-600

Question #: 68
Topic #: 1

HOTSPOT
-

You have a Fabric tenant.

You need to configure OneLake security for users shown in the following table.

The solution must follow the principle of least privilege.

Which permission should you assign to each user? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by neoverma at April 4, 2024, 10:40 p.m.

Comments

Submit Cancel

neoverma

Highly Voted 1 year ago

Correct! ReadAll and readData https://learn.microsoft.com/en-us/fabric/data-engineering/lakehouse-sharing#sharing-and-permissions

upvoted 17 times

...

AbhiShar

Most Recent 6 months, 4 weeks ago

the selections of ReadAll for User1 and Read for User2 ensure that each user gets the appropriate level of access according to their stated needs while adhering to the principle of least privilege. ReadData may imply limited access and could restrict User2 from reading all SQL endpoint data effectively.

upvoted 2 times

...

282b85d

11 months, 1 week ago

• User1: Assign ReadAll. This is because User1 needs to read all Spark data, which would require broad access across multiple datasets and objects managed by Spark. • User2: Assign ReadData. This permission is more likely to be specific to data endpoints, including SQL endpoints.

upvoted 3 times

...

stilferx

11 months, 3 weeks ago

IMHO, Req: user1 - spark -> **ReadAll**, user 2 - SQL endpoint -> **ReadData**. Roles: ReadData permission on SQL endpoint to access data without SQL policy. ReadAll permission on the lakehouse to access all data using Apache Spark. from https://learn.microsoft.com/en-us/fabric/data-engineering/lakehouse-sharing#sharing-and-permissions

upvoted 4 times

...

a998450

1 year ago

ReadAll and ReadData is Correct https://blog.fabric.microsoft.com/en/blog/lakehouse-sharing-and-access-permission-management?ft=All