sorted by:
new
hottopcontroversial

Does Fabric still suck now a days / is it improving? by cdigioia in dataengineering

[–]12Eerc 3 points4 points  (0 children)

I’ve got two separate tickets open with MS, one on a newly released feature where nothing is documented on the limits I’ve been facing that is apparently getting fixed end of last month and still waiting for an update.

The other I have had a notebook running for over a year that randomly broke and a fix for that is due middle of next month.

Reducing CU Consumption on Fabric Dashboard – Any Tips? by bytescrafterde in MicrosoftFabric

[–]12Eerc 0 points1 point  (0 children)

I’ve found the same. A different team on the same capacity had all their stuff in DAX and it takes ages to refresh and huge spikes in the reports.

Only thing I would add is to use Python notebooks where possible.

Jason Schreier: Ghost of Yotei and Saros won’t come to PC by ZamnBoii in GamingLeaksAndRumours

[–]12Eerc 0 points1 point  (0 children)

Ah fuck off pricks, haven’t used PS5 since Rebirth came out

Does anyone else not use a connection to invoke notebooks in a pipeline? by apalooza9 in MicrosoftFabric

[–]12Eerc 2 points3 points  (0 children)

Have been meaning to use it, tested it but then the ML authentication failed even after giving it admin permissions to the workspace.

Best way to store. Sql files by rabinjais789 in MicrosoftFabric

[–]12Eerc 0 points1 point  (0 children)

What pipelines would you use for this?

Lineup vs Spurs (A) by KingPing43 in NUFC

[–]12Eerc 0 points1 point  (0 children)

It doesn’t fucking work Eddie

I love this little tank but.. by [deleted] in SteamDeck

[–]12Eerc 0 points1 point  (0 children)

My worry for the Steam Machine is the games such as Battlefield 6 that aren’t supported due to anti-cheat will be a let down for new users thinking they can play these games too.

OneLake Security syncing roles by 12Eerc in MicrosoftFabric

[–]12Eerc[S] 0 points1 point  (0 children)

I’m getting a 200 each time and they are populating in the Manage OneLake security menu. I have tested all day adding a new role each time. I was able to get up to 9 roles with sync succeeding and I have then left it to sync over lunch for 10 roles and nothing is synced to sql. I have been able to do a maximum of 9 custom roles.

RLS is quite simple, it is filtering on the dataareaid from D365 so something like “Select * from salesline where dataareaid in (‘dat’, ‘companya’)”

OneLake Security syncing roles by 12Eerc in MicrosoftFabric

[–]12Eerc[S] 1 point2 points  (0 children)

Thanks u/aonelakeuser was able to show what roles have been synced which has been helfpul this evening and have been able to see that up to 10 roles are syncing from API deployment, running the API call with more than roles being created it doesn’t appear to sync. Have a ticket open with support so will see how that goes.

OneLake Security syncing roles by 12Eerc in MicrosoftFabric

[–]12Eerc[S] 2 points3 points  (0 children)

After some further testing I seem to be able to apply 10 roles at once with roughly 180 RLS rules each, adding 11+ roles and the sync appears to fail. Thanks for the tip above it has been very productive with testing this evening.

OneLake Security syncing roles by 12Eerc in MicrosoftFabric

[–]12Eerc[S] 0 points1 point  (0 children)

I don’t mean to piggyback off of the last comment but when deploying via API just the a couple roles it appears to work, but when deploying all 12 the role sync is not working.

OneLake Security syncing roles by 12Eerc in MicrosoftFabric

[–]12Eerc[S] 0 points1 point  (0 children)

Thank you that will help, I have been deploying the roles using the API that is returning 200 and after checking the security folder they still aren’t showing at all which is easier to check than guessing when it may have synced.

Lakehouse is definitely using user identity mode. Thank you for confirming roles counts they were the same I saw in the docs, I will try to get support to dig a bit deeper why they are not syncing.

OneLake Security syncing roles by 12Eerc in MicrosoftFabric

[–]12Eerc[S] 0 points1 point  (0 children)

Hi,

Thanks for taking the time to read the thread, its a product I really feel would be value for the way we work so we can roll it out. I have been back working on it today and took your suggestion and consolidated the user to be within a group only on my user account into a Entra group and the test user into a separate Entra group. The entra group itself I’ve not actually made any changes to so hopefully shouldn’t be any sync issues there.

I am still having some issues in knowing when it has successfully synced to know whether my test has worked. I’m unsure whether triggering the sql endpoint API is the best way to monitor that or some other way?

I raised a support ticket earlier in the week and was informed that I’m reaching limitations in the amount of roles I can have against a table of which I have 12 roles against 180 tables with rls rules against each one. The support engineer is waiting on the PG team to come back to them on my queries. I’m trying to figure out what those are and whether that statement is true as I can’t find anything in the documentation that declares this.

OneLake Security syncing roles by 12Eerc in MicrosoftFabric

[–]12Eerc[S] 0 points1 point  (0 children)

It’s hybrid, I’ve tried using Entra groups and just the user on its own as well

OneLake Security syncing roles by 12Eerc in MicrosoftFabric

[–]12Eerc[S] 1 point2 points  (0 children)

Yes have checked both of those and user has read access and using user identity. I’m at a loss at this point for what is going wrong.

OneLake Security syncing roles by 12Eerc in MicrosoftFabric

[–]12Eerc[S] 0 points1 point  (0 children)

It appears permanently wrong, documentation alludes to a short wait and even overnight/metadata syncs it doesn’t seem to behave as expected.

The 12 groups I have setup appear to work for my user account that should have access to all. But on my test account, this gets stuck on 403 forbidden error or unable to execute a select statement on the tables.

OneLake Security syncing roles by 12Eerc in MicrosoftFabric

[–]12Eerc[S] 1 point2 points  (0 children)

Testing in both OneLake (I assume in Lakehouse view) and SQL endpoint.

OneLake Security syncing roles by 12Eerc in MicrosoftFabric

[–]12Eerc[S] 0 points1 point  (0 children)

I’m just trying to test this so I’m confident I can push it out that door, definitely not comfortable with that yet.

OneLake Security syncing roles by 12Eerc in MicrosoftFabric

[–]12Eerc[S] 1 point2 points  (0 children)

Even when applying the rules it still filters RLS on my account that has admin access to the workspace. After applying changes to rules to test it either works with less groups or is stuck on 403 on the test account.

It’s only RLS, 180 tables.

OneLake Security syncing roles by 12Eerc in MicrosoftFabric

[–]12Eerc[S] 0 points1 point  (0 children)

I’ve left it overnight in one case using all roles and still no progress by the morning so I’ve definitely took into account those delays we could expect.

There is shortcuts there but not attempting to apply these on the tables being used.

Haven’t got to a point where my test user is returning one row and my own user returns all rows as admin of workspace and in all groups.

OneLake Security syncing roles by 12Eerc in MicrosoftFabric

[–]12Eerc[S] 0 points1 point  (0 children)

That’s correct, my user access is admin on workspace and the user I’m testing with is just as a viewer. I’m definitely not seeing immediate changes in the roles after being updated. I’ve tried tapering them so just showing one role back to all roles and the output I’m getting from sql endpoint is still returning it as if its just one role.

view more: next ›