Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Microsoft DP-600 Exam - Topic 1 Question 52 Discussion

You have a Fabric workspace named Workspace1 that contains the following items:A warehouse named Warehouse1A semantic model named Model1An interactive report named Report1You need to allow a user named User1 to access a single table in Warehouse1. The solution must follow the principle of least privilege.What should you do first?
A) Assign object level permissions to User1 for Warehouse1.
B) Assign the db_datareader role to User1 for Warehouse1.
C) Share Warehouse1 with User1.
D) Assign the Viewer role to User1 for Workspace1.

Microsoft DP-600 Exam - Topic 1 Question 52 Discussion

Actual exam question for Microsoft's DP-600 exam
Question #: 52
Topic #: 1
[All DP-600 Questions]

You have a Fabric workspace named Workspace1 that contains the following items:

A warehouse named Warehouse1

A semantic model named Model1

An interactive report named Report1

You need to allow a user named User1 to access a single table in Warehouse1. The solution must follow the principle of least privilege.

What should you do first?

Show Suggested Answer Hide Answer
Suggested Answer: A

Requirement

Fabric workspace: Workspace1

Contains: Warehouse1, Model1, Report1

Task: Allow User1 to access a single table in Warehouse1.

Must follow principle of least privilege grant only the exact permissions required.

Step 1: Evaluate Options

A . Assign object level permissions to User1 for Warehouse1.

In Fabric warehouses, you can grant permissions at the object level (table, schema, or column).

If the requirement is access to only one table, the correct approach is to grant SELECT permissions on that specific table.

This satisfies least privilege.

Correct.

B . Assign the db_datareader role to User1 for Warehouse1.

db_datareader provides read access to all tables in the database/warehouse.

This violates least privilege.

Not correct.

C . Share Warehouse1 with User1.

Sharing grants access to the whole warehouse.

Too broad, not least privilege.

Not correct.

D . Assign the Viewer role to User1 for Workspace1.

Viewer role allows seeing all items in the workspace (warehouse, model, reports).

This would expose more than the single table.

Not correct.

Step 2: Correct Action

Use object-level permissions:

GRANT SELECT ON dbo.TableName TO [User1];

This ensures User1 can only query that specific table, nothing else.

Reference

Manage object-level security in Microsoft Fabric warehouses


Contribute your Thoughts:

0/2000 characters
Anisha
4 days ago
I agree, A is more precise.
upvoted 0 times
...
Wayne
9 days ago
D is too general for this case.
upvoted 0 times
...
Stefania
14 days ago
C doesn't limit access enough.
upvoted 0 times
...
Lavonna
19 days ago
B seems safer, but too broad.
upvoted 0 times
...
Kristel
25 days ago
It gives specific access.
upvoted 0 times
...
Anisha
30 days ago
Why A?
upvoted 0 times
...
Kristel
1 month ago
I think A is the best choice.
upvoted 0 times
...
Wayne
1 month ago
This question is tricky.
upvoted 0 times
...
Maryann
2 months ago
Not sure if A is the best first step, seems complicated.
upvoted 0 times
...
Kimbery
2 months ago
B is too broad, we need to be specific.
upvoted 0 times
...
Tanesha
2 months ago
Wait, can’t we just share the warehouse instead?
upvoted 0 times
...
Darnell
2 months ago
Totally agree, least privilege is key!
upvoted 0 times
...
Rashida
2 months ago
A) Assign object level permissions to User1 for Warehouse1.
upvoted 0 times
...
Leonard
2 months ago
I wonder if assigning the Viewer role would be too broad since it applies to the whole workspace. That seems risky for least privilege.
upvoted 0 times
...
Edison
3 months ago
I practiced a similar question, and I feel like sharing the warehouse might not be the best option since it could give too much access.
upvoted 0 times
...
Narcisa
3 months ago
I'm not entirely sure, but I remember something about roles. Would assigning the db_datareader role really limit access enough?
upvoted 0 times
...
Hannah
3 months ago
I think the principle of least privilege means we should only give User1 access to what they absolutely need, so maybe A is the right choice?
upvoted 0 times
...

Save Cancel