Exam DP-600 topic 1 question 137 discussion

To implement RLS for Table1 in Fabric, create a FUNCTION to define row-filtering logic and a SECURITY POLICY to enforce it. This ensures users only see the rows they are permitted to access.

AE A. DATABASE ROLE Assigning users to roles is essential for managing which users can access which rows. You associate users with database roles, and your RLS logic can use this mapping to filter data. E. SECURITY POLICY A security policy enforces a predicate function that defines which rows are visible to which users. It's what actually applies the RLS logic to the table. Note on D. FUNCTION Inline Table-Valued Functions (TVFs) are often used within RLS, but they must be bound to a SECURITY POLICY to take effect. So on its own, a function is not sufficient unless combined with a security policy.

DE: You don't actually create a DB Role, but you do have to think about what kind of roles you want to use. You create a FUNCTION to define the security predicate, then create a SECURITY POLICY to implement the security predicate defined in the function. See: https://learn.microsoft.com/en-us/fabric/data-warehouse/tutorial-row-level-security#2-define-security-policies

To implement row-level security (RLS) for the Table1 in your Fabric warehouse (Warehouse1), ensuring that users can only see their respective data, the solution would typically involve the following objects: Correct Answers: A. DATABASE ROLE A DATABASE ROLE defines a group of users and their permissions. When implementing RLS, roles are often used to determine which users or groups of users have access to specific rows in the table. E. SECURITY POLICY A SECURITY POLICY is essential for enforcing row-level security. It allows you to filter rows in a table based on a predicate function, ensuring that users can only view the data they are authorized to access. Why Not FUNCTION: While functions (e.g., inline table-valued functions) might be involved in defining RLS filters, they are not the solution by themselves. Instead, they are used alongside SECURITY POLICY.

From ChatGPT: The correct answer to implement Row-Level Security (RLS) on a table in Microsoft Fabric Warehouse is: D. FUNCTION E. SECURITY POLICY Explanation: FUNCTION (D): Used to define a security function that filters the rows of the table based on the user's identity or specific criteria. SECURITY POLICY (E): Applies the security function to the table to restrict access to rows according to the defined criteria. This ensures that users can only see the data they are authorized to query, meeting the RLS requirements.

correct