Which three actions should you perform?

You have a Fabric workspace named Workspace1 that contains a lakehouse named Lakehouse1.

Lakehouse1 contains the following tables:

– Orders

– Customer

– Employee

The Employee table contains Personally Identifiable Information (PII).

A data engineer is building a workflow that requires writing data to the Customer table, however, the user does NOT have the elevated permissions required to view the contents of the Employee table. You need to ensure that the data engineer can write data to the Customer table without reading data from the Employee table.

Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A . Share Lakehouse1 with the data engineer.
B . Assign the data engineer the Contributor role for Workspace2.
C . Assign the data engineer the Viewer role for Workspace2.
D . Assign the data engineer the Contributor role for Workspace1.
E . Migrate the Employee table from Lakehouse1 to Lakehouse2.
F . Create a new workspace named Workspace2 that contains a new lakehouse named Lakehouse2.
G . Assign the data engineer the Viewer role for Workspace1.

View Answer

Answer: A, D, E

Explanation:

To meet the requirements of ensuring that the data engineer can write data to the Customer table

without reading data from the Employee table (which contains Personally Identifiable Information, or

PII), you can implement the following steps:

Share Lakehouse1 with the data engineer.

By sharing Lakehouse1 with the data engineer, you provide the necessary access to the data within the lakehouse. However, this access should be controlled through roles and permissions, which will allow writing to the Customer table but prevent reading from the Employee table.

Assign the data engineer the Contributor role for Workspace1.

Assigning the Contributor role for Workspace1 grants the data engineer the ability to perform actions such as writing to tables (e.g., the Customer table) within the workspace. This role typically allows users to modify and manage data without necessarily granting them access to view all data (e.g., PII data in the Employee table).

Migrate the Employee table from Lakehouse1 to Lakehouse2.

To prevent the data engineer from accessing the Employee table (which contains PII), you can migrate the Employee table to a separate lakehouse (Lakehouse2) or workspace (Workspace2). This separation of sensitive data ensures that the data engineer’s access is restricted to the Customer table in Lakehouse1, while the Employee table can be managed separately and protected under different access controls.