# Access Configuration for Microsoft Fabric Warehouse

This article outlines the process to configure Viewer-level (read-only) access for a specified identity, such as a User Assigned Managed Identity (UAMI) or Service Principal (SP) on a Microsoft Fabric Warehouse.

Access to analytical storage layers must be governed to enable secure data consumption while preserving data integrity. Viewer access allows identities to query and explore data assets, including schema and metadata, without introducing any risk of modification to underlying resources.

{% hint style="warning" %}
Viewer access in Fabric Warehouse is implemented using SQL read permissions (ReadData). This enables query execution and metadata visibility while restricting all write, update, or administrative operations.
{% endhint %}

### Prerequisites

Ensure the following conditions are met before proceeding:

#### 1. Fabric Environment Setup

* An active Fabric workspace is available
* The target Warehouse is created and accessible.

#### 2. Identity Requirements

* A User Assigned Managed Identity (UAMI) or Service Principal (SP) is created
* The identity is associated with the Bridge Client VM (if applicable).

#### 3. Access Permissions

The user performing this configuration must have:

* Workspace Admin, Owner, or equivalent role
* Permission to manage access (**roleAssignments/write**).

{% hint style="warning" %}
If sufficient privileges are not available, the Manage Permissions option will not be accessible.
{% endhint %}

### Steps to Configure Viewer Access

Follow the steps below to configure read-only access:

#### Step 1: Access Fabric Portal

* Log in to the **Microsoft Fabric Portal**
* Use an account with **Admin** or **Owner privileges**

#### Step 2: Navigate to Workspace

* Open the required Fabric Workspace
* Locate the target Warehouse

#### Step 3: Open Manage Permissions

* Click on the **three-dot menu (⋯)** for the Warehouse<br>

  <figure><img src="/files/ela5xOKe6aY5WhvCRaaT" alt=""><figcaption></figcaption></figure>
* Select **Manage Permissions**

#### Step 4: Add Identity

* Click **+ Add user**
* Select the required identity:
  * User Assigned Managed Identity (UAMI)
  * Service Principal (SP)

<figure><img src="/files/0bj7Aeuz6XIfNcPWHS5Z" alt=""><figcaption></figcaption></figure>

#### Step 5: Assign Viewer Permission

* **Select the permission:** Read all data using SQL (ReadData)

This enables:

* Read-only SQL query execution
* Metadata and schema visibility
* Secure access without modification capability

<figure><img src="/files/bPapO5ru7Lc6wz0FHiPd" alt=""><figcaption></figcaption></figure>

#### Step 6: Validate Configuration

* Confirm that the identity appears in the permissions list
* Verify that the assigned permission reflects **ReadData (Viewer-level access)**

{% hint style="info" %}
The configured access is immediately visible in the permissions panel upon successful assignment.
{% endhint %}

### Permission Summary

<table><thead><tr><th width="188.09088134765625">Permission Type</th><th width="207.18182373046875">Access Level</th><th>Description</th></tr></thead><tbody><tr><td>ReadData</td><td>Viewer</td><td>Enables read-only SQL access to data</td></tr><tr><td>Metadata Access</td><td>Included</td><td>Allows visibility of schema and objects</td></tr><tr><td>Write Access</td><td>Not Allowed</td><td>Prevents data or structural modifications</td></tr></tbody></table>

***

Copyright © 2026, OvalEdge LLC, Peachtree Corners GA USA


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.ovaledge.com/release8.1/connectors/connector-repositories/unified-data-and-ai-platforms/microsoft-fabric/access-configuration-for-microsoft-fabric-warehouse.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.