Question

A data engineer creates a OneLake shortcut in the Sales lakehouse that points to a Files folder in a Finance lakehouse located in a different workspace. When a notebook run by a colleague on the Sales team attempts to read data through the shortcut, it fails with a 403 (Unauthorized) error, even though the shortcut was created successfully. The colleague has the Viewer role on the Sales workspace. What is the most likely cause of the error?

Accepted Answer

The colleague lacks permission on the target Finance item; OneLake shortcuts use the calling user's identity and require access to the underlying data source.

Answer

OneLake shortcuts cannot span workspace boundaries, so the shortcut definition is invalid and must be recreated within the same workspace.

Answer

The shortcut cache has expired, and running the OPTIMIZE command on the target table will refresh the credentials.

Answer

The Viewer role on the Sales workspace automatically grants read access to any shortcut target, so the failure indicates a corrupted shortcut path.