Question

You are the Fabric administrator for a manufacturing company. The compliance team requires that all OneLake data for a specific workspace containing financial reports be stored within a European Azure region for data residency, while other workspaces continue to use the organization's default region. You need to enforce the regional storage requirement for only that workspace. What should you configure?

Accepted Answer

Assign the workspace to a capacity that is provisioned in a European Azure region

Answer

Enable the tenant-level 'Users can create Fabric items' setting scoped to a security group

Answer

Create a OneLake security role on the lakehouse that restricts access by region

Answer

Turn on the 'Block external data sharing' tenant setting for the workspace