QuestionQ45

VerifiedSecure, optimize, and deploy database solutions

You have a Microsoft Fabric workspace named Workspace1 that contains a SQL database named SalesDB and an API for GraphQL item named SalesApi.

You have a Microsoft Entra group named SqlUsers.

From Workspace1, you assign permissions to SalesApi as shown in the following exhibit.

Question Image

The SalesDB connection has the connectivity option configured as shown in the following exhibit.

Question Image

SqlUsers has the Viewer role for Workspace1.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Yes or No
StatementsYesNo
The members of SqlUsers can modify the data in SalesDB via SalesAPI.
The members of SqlUsers can view the data in SalesDB via SalesAPI.
The members of SqlUsers can change the field mappings of SalesAPI.
Explanation

With SSO, a GraphQL caller needs Run Queries and Mutations permission on the API plus the required read or write permission on the underlying data source. SqlUsers lacks Run Queries and Mutations, so it cannot query or mutate SalesDB through SalesApi. The separately granted Edit GraphQL item permission allows members to edit the GraphQL item configuration, including field mappings.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!