OneLake Security RLS: Define Security Once, Enforce It Everywhere — Microsoft Fabric

OneLake Security is now Generally Available in Microsoft Fabric — and it changes how we think about governing access to data across the entire Fabric estate. The old way: define Row-Level Security in the SQL endpoint. Define it again in the warehouse. Define it again in the lakehouse. Define it again in the semantic model. Four places. Four sets of rules to maintain. Four points of failure. The new way: define security once in OneLake. Every workload observes it automatically — SQL analytics endpoint, Spark notebooks, semantic models, Direct Lake, AI data agents. One definition. Universal enforcement. Upstream security that follows your data everywhere. In this video I explain why applying security upstream in OneLake is the right architectural choice — and walk through everything you need to set it up, step by step, with a full demo.