What is order of evaluation of access in Fabric?

• A. Microsoft Entra ID authentication, Fabric access, Data security
• B. Data security, Fabric access, Microsoft Entra ID authentication
• C. Fabric access, Microsoft Entra ID authentication, Data security
• D. Data security, Microsoft Entra ID authentication, Fabric access

Answer: (A)

Access evaluation starts with proving who you are, then deciding what you’re allowed to do, and finally enforcing protections on the data you access. First, Microsoft Entra ID authentication establishes the user’s identity. Without a verified identity, you can’t reliably determine permissions. Next, Fabric access checks evaluate whether that authenticated user has the required rights to access the particular Fabric resources (workspaces, datasets, pipelines) they’re requesting. Only after access is allowed do data security policies come into play, applying data-level protections such as masking, encryption, or other safeguards to ensure the data remains protected according to policy. Approaches that try to apply access or security before identifying the user don’t make sense, so the correct sequence is: authenticate, then verify Fabric access, then enforce data security.