Question

A Fabric Analytics Engineer manages a warehouse in a Fabric workspace. The Finance team needs SELECT access to most tables in the 'dbo' schema, but they must be completely blocked from accessing the 'dbo.EmployeeCompensation' table — including its existence in queries. The engineer wants the most direct T-SQL approach to prevent the Finance role from reading that single table while preserving their access to the rest of the schema. Which approach should the engineer use?

Accepted Answer

Apply a DENY SELECT permission on the dbo.EmployeeCompensation table to the Finance role after granting SELECT on the dbo schema

Answer

Configure a row-level security (RLS) predicate on dbo.EmployeeCompensation that filters out all rows for Finance users

Answer

Apply column-level security by denying SELECT on every column of dbo.EmployeeCompensation for the Finance role

Answer

Remove the Finance users from the workspace Viewer role so they cannot see the warehouse