As organizations scale data usage in Microsoft Fabric, access control must balance security, reliability, and agility. This session demystifies Fabric’s permission and identity model—explaining how who can access an item is intentionally decoupled from which identity an item uses to run.

You’ll learn how workspace roles, item‑level permissions, and universal vs. item-specific permissions work together to support least‑privilege access.

From there, we’ll explore Fabric’s identity capabilities—service principals, workspace identity, and new identity capabilities—that give teams finer-grained control over which identity an item uses.

Together, these eliminate owner dependency and help to enable enterprise‑grade automation.

Through real‑world scenarios—cross‑workspace sharing, scheduled pipelines, notebook execution, and external data access—you’ll see how to design an access model that scales across teams and environments without slowing developers or overburdening admins