
Ultimate access to all questions.
You are a Microsoft Fabric Analytics Engineer working on a project that requires setting up a secure data analytics environment. The project involves multiple teams with different access needs to various Fabric items within a shared workspace. Your goal is to implement a solution that ensures only authorized users have access to specific items, adhering to the principle of least privilege. Additionally, the solution must be scalable to accommodate future team members and projects without significant overhead. Which of the following approaches BEST meets these requirements? (Choose one option.)
A
Create a new workspace for each team and assign users to their respective workspaces, then use role-based access control (RBAC) to define permissions for each user within their workspace.
B
Implement Azure Active Directory (Azure AD) to manage user authentication and authorization, and use Azure AD groups to assign access to specific items within the workspace, ensuring that access is easily manageable and scalable.
C
Use Azure Key Vault to store and manage access keys for Fabric items, and configure access policies to control who can access the keys, thereby indirectly controlling access to the items.
D
Manually create a custom access control list (ACL) for each item in the workspace, specifying which users or groups have read, write, or execute permissions, to ensure precise control over access.