DP-700 Implement and Manage an Analytics Solution Practice Question
You have a Lakehouse in a workspace and want to allow a specific user to query the data using the SQL analytics endpoint, but you do not want them to be able to modify the Lakehouse schema or delete files. Which action should you take?
⚠ Common exam trap
Candidates often confuse workspace-level roles like 'Contributor' with granular Lakehouse permissions, granting broader modification rights than requested by the least-privilege principle.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Share the Lakehouse with the user and grant 'Read' and 'ReadData' permissions.
This question explores the granularity of permissions in Microsoft Fabric. Providing access to the SQL analytics endpoint requires specific permissions that differ from the full 'Contributor' access. Understanding how to share items with 'Read' and 'ReadData' permissions is essential for implementing a least-privilege security model.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Assign the user to the Contributor role in the workspace.
Why it's wrong here
Assigning a user to the Contributor role grants them extensive permissions, including the ability to delete items and modify schemas. This violates the requirement to prevent schema modifications and file deletions, as Contributors have full write access to all items within that specific workspace.
- ✓
Share the Lakehouse with the user and grant 'Read' and 'ReadData' permissions.
Why this is correct
Sharing the Lakehouse with 'Read' and 'ReadData' (via the SQL analytics endpoint) allows the user to query the data without having write access to the underlying files or the ability to change the Lakehouse structure. This effectively satisfies the requirement for read-only SQL access.
- ✗
Grant the user 'Execute' permissions on the workspace capacity.
Why it's wrong here
There is no 'Execute' permission at the capacity level that controls SQL querying for a specific Lakehouse. Capacity permissions relate to the management of the compute resource itself, such as scaling or monitoring, rather than the data access controls for individual items within a workspace.
- ✗
Add the user to the 'Member' role and disable 'Share' permissions.
Why it's wrong here
The Member role, even with sharing disabled, still allows the user to modify and delete items within the workspace. This does not meet the requirement of preventing schema modifications or file deletions, as Members are considered co-owners of the content within the workspace by default.
About these practice questions
This DP-700 question is part of Courseiva's 152-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This DP-700 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DP-700 exam.