Microsoft · DP-700
Security and governance
DP-700 · Lesson 2 of 11 · 8:12
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the DP-700 exam (Microsoft Certified: Fabric Data Engineer Associate). In this lesson: workspace roles and item permissions (Read, ReadData, ReadAll), row-level, column-level, and object-level security in a warehouse, dynamic data masking and UNMASK, OneLake security roles (Read, ReadWrite, deny by default), sensitivity labels, endorsement (Promoted, Certified, Master data), and audit logs in Microsoft Purview. Includes three original practice questions.
Preview the topics
- A reporting team must query every table in a warehouse with T-SQL, but must not open the workspace or see its other items. What should the data engineer do?
- Support agents must see customer email addresses masked in query results, while the stored data stays unchanged. What should the engineer use?
- In a lakehouse, a group of Viewers must read only the Sales folder and the Orders table, and nothing else in the item. What should the engineer configure?