Can we encrypt data in Fabric Lakehouse

Sakshi Rajusing Khojare 60

How can we encrypt any column in Microsoft fabric Lakehouse using purview.

Smaran Thoomu 18,790 Reputation points Microsoft Vendor

2024-12-17T10:14:47.0733333+00:00

@Sakshi Rajusing Khojare Following up to see if the below answer was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

1 answer

Smaran Thoomu 18,790 Reputation points Microsoft Vendor

2024-12-13T18:36:10.3133333+00:00
Hi @Sakshi Rajusing Khojare

Welcome to Microsoft Q&A platform and thanks for posting your query here.

Currently, Microsoft Fabric Lakehouse does not have a direct feature to encrypt individual columns within the Lakehouse tables using Microsoft Purview. Purview focuses primarily on metadata management, data lineage, and data governance rather than encryption.

However, data encryption in Fabric Lakehouse can be handled through the underlying storage mechanisms, such as Azure Data Lake Storage Gen2, which provides encryption at rest by default. This ensures that your data is encrypted while stored in the lakehouse. For column-level encryption or more granular control over encryption, you would need to implement it at the application or processing layer, such as during the data ingestion process or by using encryption functions in databases or ETL processes.

In summary, while Purview can assist with data classification and governance, actual encryption, especially at the column level, should be managed via Azure's storage or other services like Azure Key Vault and custom data processing steps.

Reference:

Column-level security in Fabric data warehousing

Use Microsoft Purview to govern Microsoft Fabric

Microsoft Fabric end-to-end security scenario

Hope this helps. Do let us know if you any further queries.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Please sign in to rate this answer.
Sakshi Rajusing Khojare 60 Reputation points

2024-12-15T05:03:17.4733333+00:00

Means if I am having sensitive info such as credit card number in my Lakehouse and I want that some sort of people should not see. Can how can I acheive this ?

Smaran Thoomu 18,790 Reputation points Microsoft Vendor

2024-12-16T08:29:12.83+00:00

Hi Sakshi Rajusing Khojare

Thanks for your follow up questions! If you have sensitive information, such as credit card numbers, in your Microsoft Fabric Lakehouse and want to restrict access to certain users, you can achieve this using Column-Level Security (CLS) rather than encryption. CLS allows you to control who can access specific columns of a table, ensuring sensitive information is hidden from unauthorized users.

Column-level security is supported on the SQL analytics endpoint of the Fabric Lakehouse. You can use T-SQL GRANT statements to specify which users or roles can access particular columns in a table. For example, you can restrict access to the CreditCard column for certain users while allowing access to other columns. Example:
GRANT SELECT ON Customers(CustomerID, FirstName, LastName, Email) TO [AuthorizedRole];
Any user in the AuthorizedRole will not see the CreditCard column when querying the table.

For scenarios where sensitive data needs to be visible but partially hidden (e.g., masking part of the credit card number), you can implement Dynamic Data Masking (DDM). This ensures sensitive data is visible only to authorized users, with others seeing masked or obfuscated values.

While Microsoft Purview does not encrypt data, it helps classify sensitive data and apply governance policies. You can use Purview to discover and label sensitive data like credit card numbers and then manage access using Azure tools.

If encryption is required, the underlying Azure Data Lake Storage (ADLS) used by Fabric Lakehouse ensures all data is encrypted at rest using either platform-managed keys or customer-managed keys (CMK). This ensures your data is protected even when stored.

For detailed steps on column-level security, refer to this documentation.

Hope this helps. Do let us know if you any further queries.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

Smaran Thoomu 18,790 Reputation points Microsoft Vendor

2024-12-18T16:03:00.28+00:00

Sakshi Rajusing Khojare Following up to see if the above answer was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Can we encrypt data in Fabric Lakehouse

1 answer

Your answer