RLS, CLS, OLS not supported lakehouse and warehouse
Hello Fabricators, I am currently working on a project where the existing Power BI reports will be migrates to Fabric eco-system. I was really excited about the "direct lake" mode, where the Power BI connects directly to the semantic models in Fabric. However, the lack of support for granular access controls in Fabric warehouses - RLS and OLS is a major and a critical limitation, because of which I have to resort to the conventional way of the import mode. 1. I hope that I am proven wrong and I am missing something out here. 2. If my analysis is correct, I wish that either a "unified RLS, OLS, CLS" feature is introduced in Fabric across lakehouses, warehouses and Power BI or the existing RLS, OLS, CLS are supported in Power BI for direct lake mode too. The existing Power BI set-up has RLS and CLS systematically defined. And I was looking for approaches to migrate or recreate the same security policies now in Fabric set-up. But the first surprise hit me when I noticed that "manage roles" is disabled in Power BI, when connected to data source in direct lake mode (another term for this mode is "live connection"). Then I explored Warehouse in details and came across "security policies" feature, defined using T-SQL statements, only to find that these are not meant for Power BI connected to the warehouse. These access controls apply only to those users trying to access the warehouse from the Fabric workspace or SQL end point. Discovered another feature "Data marts", which is in preview and thought of using it in Gold layer instead of Warehouse. On one hand, this has the same intuitive UI for defining RLS, OLS, exactly same as that in Power BI. However, it has other limitations: 1. Max size supported in Data marts is 100 GB. So not scalable beyond an extent. 2. It is meant primarily for self-service analytics persona and not for replicating the complete Warehouse. 3. Data ingestion into marts is possible only via Dataflow Gen2, not possible via Copy Data activity or notebooks.