Glossary

Alphabetical definitions of terms used across the Fabric data platform documentation.

ADR (Architecture Decision Record) — A documented decision about the platform's architecture, including reasoning, alternatives considered, and consequences. See the ADR Decision Log.

Bronze — The first data layer, implemented as a Fabric Lakehouse (Lakehouse_Bronze). Contains raw source data ingested via Dataverse shortcuts, Vesper API, and Datacollect forms. No transformations occur here. See Architecture.

CLS (Column-Level Security) — Security mechanism that restricts access to specific columns in the Gold Warehouse. Implemented via SQL DENY SELECT statements on sensitive columns for certain roles.

CU (Capacity Unit) — Microsoft Fabric's unit of compute capacity. CU utilization is monitored by the observability module to prevent throttling. See Azure Functions Overview.

Dataverse — Microsoft's low-code data platform (part of Dynamics 365). Source system for trade, inventory, logistics, and finance data, accessed via Bronze Lakehouse shortcuts.

dbt (data build tool) — The transformation engine that builds the Gold Warehouse from Bronze source data. Runs dual-dialect SQL: DuckDB for local development, T-SQL for Fabric. See Data Platform.

DefaultAzureCredential — Azure SDK class that automatically selects the best available credential (Managed Identity in Azure, CLI token locally). Used by all Function App modules for authentication.

Delta table — An open-source storage format used by Fabric Lakehouses and Warehouses. Supports ACID transactions, time travel, and schema evolution. DirectLake semantic models read Delta tables directly.

DirectLake — A Power BI semantic model mode that reads directly from Delta tables without importing data into memory. Provides automatic refresh after dbt builds complete — no scheduled refresh needed. See Semantic Models.

DuckDB — An in-process analytical database used for local dbt development (--target local). Provides fast iteration without requiring a Fabric connection. See ADR-3.

Easy Auth — Azure App Service authentication feature that provides built-in auth without code changes. Used (when enabled) to protect the export UI endpoints.

Entra ID — Microsoft's identity platform (formerly Azure Active Directory). All SPNs, Managed Identities, users, and security groups are managed here.

fabric-cicd — A Python tool that deploys semantic models and reports from git to Fabric workspaces. Uses parameter files for environment-specific GUID substitution. See Fabric Deployment.

Gold — The second data layer, implemented as a Fabric Warehouse (Gold_Warehouse). Contains dbt-built staging views, intermediate views, and mart tables (dimensions + facts) in the dbo schema. See Architecture.

Import mode — A Power BI semantic model mode that copies data into memory on a schedule. Requires OAuth credentials for refresh. Used by Datacollect, ETL_Monitoring, and Report Owners models. See Semantic Models.

Key Vault — Azure Key Vault (kv-fabric-dbt-keys), the single vault storing SPN credentials and connection strings for all environments. See ADR-5.

Lakehouse — A Fabric item that stores data as Delta tables in OneLake. The platform uses Lakehouse_Bronze for raw source data accessed via shortcuts.

Managed Identity (MI) — An Azure identity automatically managed by the platform, used by the Function App for authentication. No secrets to manage or rotate.

OneLake — Microsoft Fabric's unified data lake. All Fabric items (Lakehouses, Warehouses) store their data in OneLake. Shortcuts provide zero-copy access across workspaces.

PBIR — Power BI Report format used for version-controlled reports. Files contain a connectionString with an environment-specific semanticmodelid GUID.

RLS (Row-Level Security) — Security mechanism that filters data rows based on the user's identity or group membership. Implemented via DAX expressions in semantic models. See Security Architecture.

Semantic Model — A Power BI data model that defines tables, relationships, measures, and security rules. Reports connect to semantic models, not directly to the warehouse. See Semantic Models.

Shortcut — A Fabric Lakehouse feature that provides zero-copy access to data in another location (Dataverse, another Lakehouse, external storage). The Bronze layer uses shortcuts for all Dataverse source tables.

SPN (Service Principal Name) — An Entra ID application identity used for automated processes. The platform uses two: sp-fabric-data-worker (CI/CD) and sp-fabric-platform-admin (infrastructure management).

TMDL (Tabular Model Definition Language) — A text-based format for defining Power BI semantic models. Stored in git for version control and deployed via fabric-cicd. See Semantic Models.

Warehouse — A Fabric item optimized for SQL analytics (Gold_Warehouse). Supports T-SQL queries, schemas, and RBAC. All dbt output lands here.

Workspace — A Fabric container for items (Lakehouses, Warehouses, Semantic Models, Reports). The platform uses 4 workspaces per environment: Gold, Bronze, Semantic, Reports.

Workspace App — A curated, read-only Power BI experience that presents reports organized by business section. Business users access reports through the app, not directly through workspaces. See Reporting Overview.