Question 130
A Fabric Warehouse exposes SQL tables to groups with distinct responsibilities. The current environment exhibits the following problem: a user sees records belonging to another business unit despite an existing Warehouse RLS policy. Which technical choice fits this evidence?
Explanation
Correct Answer
Validate and correct the execution identity to business-unit mapping used by the RLS predicate. Row filters enforce the wrong boundary if the user's security mapping is inaccurate.
Incorrect Answers
A reporting group requires read access to one schema but not others. Data-warehouse SQL permissions can be scoped below the whole workspace.
A finance reader should see masked values in selected columns without altering storage. Masking changes exposed presentation, not underlying stored data.
A user can access the Warehouse but should not query a confidential table. Item-level visibility is insufficient for fine-grained SQL object authorization.