The Fence That Isn't There
Episode 38 • 2026-09-18 Duration: 9:13
Fabric domains look like security boundaries. They're metadata. Every user in your tenant can see every domain name, the contributor role only matters in the hands of someone who is already a workspace admin, and the default domain keeps running when nobody's watching. This episode opens up what a domain actually is — and the specific trap teams walk into when they treat a label as a wall.
What we discuss
- How it actually works underneath the abstraction
- The pattern we keep seeing in the field
- Where the obvious answer breaks
- A real Reddit/Microsoft Q&A question unpacked
- F-SKU realism — what this actually costs
- When the rejected approach is actually right
- Risks of the recommended path
- The architectural principle to take home
Key takeaways
- There is, in somebody's tenant tonight, a domain named after something a dozen people weren't supposed to know about.
- The lesson transfers anywhere. A domain answers 'whose data is this'. It doesn't answer 'who may see it'. Those are different questions, they live at different layers, and every time someone collapses them, they end up with structure that...
- If you come expecting a boundary, you'll be frustrated.
Resources
- Fabric domains
- Power BI implementation planning: Tenant administration
- Best practices for domains
- Domain-level default sensitivity labels
- Endorsement overview
- OneLake catalog overview
- Scope the catalog to a particular domain
- Governance overview and guidance
- Roles in workspaces
- About tenant settings
About the show
AI-generated voices. Matthias — cloned voice. Fabia — designed AI co-host. See Matthias live on YouTube (Fabric Friday), at his meetups, and at conferences like FabCon.
Hosted by Matthias Falland — Microsoft Data Platform MVP and community architect behind the Fabric Periodic Table. New episodes every Friday.
Submit your case
Have an architecture decision you are wrestling with? DM Matthias on LinkedIn — find him as Matthias Falland. Three to five sentences about the decision, your team size, and your current stack. We anonymize before airing.
This podcast was generated by AI. Both voices are synthetic: Matthias is a cloned voice, Fabia is a designed AI co-host.
Brand design based on fabricperiodictable.com.