Exam DP-600 topic 1 question 137 discussion

To implement RLS for Table1 in Fabric, create a FUNCTION to define row-filtering logic and a SECURITY POLICY to enforce it. This ensures users only see the rows they are permitted to access.

DE: You don't actually create a DB Role, but you do have to think about what kind of roles you want to use. You create a FUNCTION to define the security predicate, then create a SECURITY POLICY to implement the security predicate defined in the function. See: https://learn.microsoft.com/en-us/fabric/data-warehouse/tutorial-row-level-security#2-define-security-policies

To implement row-level security (RLS) for the Table1 in your Fabric warehouse (Warehouse1), ensuring that users can only see their respective data, the solution would typically involve the following objects: Correct Answers: A. DATABASE ROLE A DATABASE ROLE defines a group of users and their permissions. When implementing RLS, roles are often used to determine which users or groups of users have access to specific rows in the table. E. SECURITY POLICY A SECURITY POLICY is essential for enforcing row-level security. It allows you to filter rows in a table based on a predicate function, ensuring that users can only view the data they are authorized to access. Why Not FUNCTION: While functions (e.g., inline table-valued functions) might be involved in defining RLS filters, they are not the solution by themselves. Instead, they are used alongside SECURITY POLICY.

From ChatGPT: The correct answer to implement Row-Level Security (RLS) on a table in Microsoft Fabric Warehouse is: D. FUNCTION E. SECURITY POLICY Explanation: FUNCTION (D): Used to define a security function that filters the rows of the table based on the user's identity or specific criteria. SECURITY POLICY (E): Applies the security function to the table to restrict access to rows according to the defined criteria. This ensures that users can only see the data they are authorized to query, meeting the RLS requirements.

correct