nerdexam
Microsoft

DP-700 · Question #115

You manage a semantic model in Microsoft Fabric. Row-level security (RLS) has been configured with two roles: FinanceTeam and SalesTeam. The following roles have been assigned permissions on the…

The correct answer is B. Admin will be able to read data from the semantic model C. Manager will be able to read data from the semantic model. This question assesses understanding of how Row-Level Security (RLS) interacts with different permissions (Build, Write, Read) on a Microsoft Fabric semantic model.

Manage data governance and security

Question

You manage a semantic model in Microsoft Fabric. Row-level security (RLS) has been configured with two roles: FinanceTeam and SalesTeam. The following roles have been assigned permissions on the semantic model: - The analyst has Build permission and is not assigned to any RLS role - The admin has Write permission and is not assigned to any RLS role - The manager has Read permission and is assigned to the FinanceTeam RLS role Which of the following statements are true? (Select two )

Options

  • AAnalyst will be able to read data from the semantic model
  • BAdmin will be able to read data from the semantic model
  • CManager will be able to read data from the semantic model
  • DAll users must be assigned to an RLS role to read data when RLS is defined

How the community answered

(54 responses)
  • A
    9% (5)
  • B
    83% (45)
  • D
    7% (4)

Why each option

This question assesses understanding of how Row-Level Security (RLS) interacts with different permissions (Build, Write, Read) on a Microsoft Fabric semantic model.

AAnalyst will be able to read data from the semantic model

The analyst has Build permission and is not assigned to any RLS role; when RLS is defined, users with only Build permission and no RLS role assignment will not be able to read data from the semantic model.

BAdmin will be able to read data from the semantic modelCorrect

The admin has Write permission on the semantic model and is not assigned to any RLS role; Write permission includes Read, and RLS does not apply to users with Write or higher permissions. Therefore, the admin will be able to read all data from the semantic model, bypassing RLS.

CManager will be able to read data from the semantic modelCorrect

The manager has Read permission and is assigned to the FinanceTeam RLS role; Read permission allows data consumption, and RLS will filter the data according to the FinanceTeam role definition. Therefore, the manager will be able to read data from the semantic model, subject to the RLS rules.

DAll users must be assigned to an RLS role to read data when RLS is defined

Not all users must be assigned to an RLS role to read data; users with higher permissions like Write or Admin bypass RLS entirely.

Concept tested: Semantic model security and Row-Level Security (RLS)

Source: https://learn.microsoft.com/power-bi/enterprise/service-row-level-security-r

Topics

#Row-Level Security (RLS)#Semantic Model Security#Fabric Permissions#Power BI Security

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full DP-700 Practice