fabric-dw

Revoke permissions on a securable from a principal. Executes ``REVOKE <permissions> ON <scope> FROM <principal>``. Blocked by ``FABRIC_MCP_READONLY``. Requires ``FABRIC_MCP_ALLOW_DESTRUCTIVE=1`` because revoke removes an existing permission (destructive operation). Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. permissions: Comma-separated permission tokens (e.g. ``"SELECT,INSERT"``). principal: Principal name to revoke from (Entra UPN, app GUID, or role name). scope: Securable class -- ``"DATABASE"`` (default), ``"SCHEMA"``, or ``"OBJECT"``. schema: Schema name (required when scope is ``"SCHEMA"``). object_name: Qualified object name ``<schema>.<object>`` (required when scope is ``"OBJECT"``). columns: Optional list of column names for column-level security (OBJECT scope only; permissions must be SELECT, UPDATE, or REFERENCES). Pass ``None`` (omit) for no column restriction. Passing an empty list raises a ``ToolError``. grant_option_only: When ``True``, revokes only the grant option (adds ``GRANT OPTION FOR``), leaving the base permission in place. cascade: When ``True``, cascades the revocation to principals the grantee has granted the permission to (adds ``CASCADE``).

Roll a snapshot's timestamp forward (or reset to current). Args: workspace: Workspace name or GUID. warehouse: Parent warehouse name or GUID (used for the SQL connection). snapshot_name: The snapshot database name to roll. new_dt: Optional ISO-8601 datetime string; defaults to CURRENT_TIMESTAMP. Naive datetimes (no timezone offset) are interpreted as UTC.

Replace the audited action groups for a warehouse or SQL analytics endpoint. Only replaces the action groups. Does not toggle the audit enabled or disabled state; if auditing was Disabled before the call it remains Disabled afterwards. CAUTION: Each audit write reads current settings via an eventually-consistent GET that may lag a recent PATCH by several minutes. The retention period read from that GET is round-tripped; if retention was changed within the lag window, this call may silently revert it. Space audit writes at least a few minutes apart. Args: workspace: Workspace name or GUID. warehouse: Warehouse or SQL analytics endpoint name or GUID. action_groups: List of audit action group names.

Update the audit log retention period without changing the audit enabled/disabled state. Audit must already be enabled; if disabled, enable it first with ``enable_audit``. CAUTION: The pre-flight GET used to round-trip the existing action-group list is eventually consistent and may lag a recent PATCH by several minutes. If the action-group list was changed within that window, this call may silently revert it. Space audit writes at least a few minutes apart. Args: workspace: Workspace name or GUID. warehouse: Warehouse or SQL analytics endpoint name or GUID. days: Retention period in days (1-3650). The API enforces its own upper bound.

Change (or remove) the data-clustering columns of an existing table. Rebuilds the table via a transactional CTAS-swap: 1. ``CREATE TABLE [schema].[__recluster_<hex>] [WITH (CLUSTER BY (...))] AS SELECT * FROM [schema].[orig]`` 2. ``DROP TABLE [schema].[orig]`` 3. ``EXEC sp_rename`` to restore the original name All three steps run inside ONE transaction. Any failure rolls back automatically — no orphan temp table is left behind. CAUTION: This operation copies the full table (runtime is proportional to table size). Dependent views and stored procedures that reference this table by name are NOT automatically updated by ``sp_rename`` and may need refreshing after the swap. Only supported on Fabric Data Warehouses (not SQL Analytics Endpoints). Args: workspace: Workspace name or GUID. item: Warehouse name or GUID. SQL Analytics Endpoints are rejected. qualified_name: Dot-separated qualified table name, e.g. ``dbo.sales``. cluster_by: New list of column names for the ``CLUSTER BY`` clause (up to 4). Pass ``null`` or an empty list to remove clustering (rebuilds table without ``CLUSTER BY``).

Apply or replace a dynamic data mask on a column. Executes ``ALTER TABLE ... ALTER COLUMN ... ADD MASKED WITH (FUNCTION = '...')``. ``ADD MASKED`` replaces any existing mask on the column without error. Blocked by ``FABRIC_MCP_READONLY``. Supported mask function types: - ``"default"`` -- full masking; no extra args. - ``"email"`` -- email masking (exposes first char and ``".com"`` suffix); no extra args. - ``"random"`` -- numeric random mask; requires *start* and *end*. - ``"partial"`` -- custom string partial mask; requires *prefix*, *padding*, and *suffix*. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. table_schema: Schema name of the target table. table_name: Name of the target table. column_name: Name of the column to mask. fn_type: Mask function type -- ``"default"``, ``"email"``, ``"random"``, or ``"partial"`` (case-insensitive). start: Lower bound for ``random()`` masking (required when *fn_type* is ``"random"``). Must be <= *end*. end: Upper bound for ``random()`` masking (required when *fn_type* is ``"random"``). prefix: Leading characters to expose for ``partial()`` masking (required when *fn_type* is ``"partial"``). padding: Replacement padding string for ``partial()`` masking (required when *fn_type* is ``"partial"``). Must not contain ``"``, ``)``, ``;``, ``--``, control characters (including U+0085, U+2028, U+2029), and must not exceed 128 characters. suffix: Trailing characters to expose for ``partial()`` masking (required when *fn_type* is ``"partial"``).

Enable or disable Delta Lake log publishing on a warehouse. Executes ``ALTER DATABASE CURRENT SET DATA_LAKE_LOG_PUBLISHING = { AUTO | PAUSED }`` and returns the effective settings read back after the change. Only supported on Fabric Data Warehouses (not SQL Analytics Endpoints). SQL Analytics Endpoints are rejected with a ``ToolError``. Args: workspace: Workspace name or GUID. item: Warehouse name or GUID. SQL Analytics Endpoints are rejected. enabled: ``True`` to enable Delta Lake log publishing (``= AUTO``), ``False`` to disable it (``= PAUSED``).

Enable or disable result-set caching on a warehouse. Executes ``ALTER DATABASE CURRENT SET RESULT_SET_CACHING { ON | OFF }`` and returns the effective settings read back after the change. Only supported on Fabric Data Warehouses (not SQL Analytics Endpoints). SQL Analytics Endpoints are rejected with a ``ToolError``. Args: workspace: Workspace name or GUID. item: Warehouse name or GUID. SQL Analytics Endpoints are rejected. enabled: ``True`` to enable result-set caching, ``False`` to disable it.

Enable or disable a row-level security policy. Executes ``ALTER SECURITY POLICY ... WITH (STATE = ON|OFF)``. Not destructive -- enabling or disabling a policy is reversible. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. policy_name: Qualified policy name (``"schema.name"`` or ``"name"``). enabled: ``True`` to enable the policy, ``False`` to disable it.

Set the time-travel retention period on a warehouse. Executes ``ALTER DATABASE CURRENT SET TIME_TRAVEL_RETENTION_PERIOD = <n> DAYS`` and returns the effective settings read back after the change. Only supported on Fabric Data Warehouses (not SQL Analytics Endpoints). SQL Analytics Endpoints are rejected with a ``ToolError``. Args: workspace: Workspace name or GUID. item: Warehouse name or GUID. SQL Analytics Endpoints are rejected. days: Retention period in days. Must be in the range 1-120 (inclusive).

Set the default Data Warehouse collation for a workspace. Args: workspace: Workspace name or GUID. collation: Collation to apply. Fabric Data Warehouse supports a fixed set of collations. Supported values include: - ``Latin1_General_100_BIN2_UTF8`` (recommended default) - ``Latin1_General_100_CI_AS_KS_WS_SC_UTF8`` - ``Latin1_General_CI_AS`` - ``SQL_Latin1_General_CP1_CI_AS`` Supplying an unsupported value will cause the Fabric API to return an error. See the Fabric documentation for the full list of supported collations.

Show details of a statistic using DBCC SHOW_STATISTICS. Returns the stat header, density vector, and histogram steps. Both Data Warehouses and SQL Analytics Endpoints are supported. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. qualified_table: Qualified table name, e.g. ``dbo.sales``. stat_name: The name of the statistic to show. histogram_only: When True, return only the histogram steps.

Take ownership of a Warehouse.

Move a T-SQL user-defined function to another schema via ALTER SCHEMA TRANSFER. Function DDL is supported on both Data Warehouses and SQL Analytics Endpoints -- unlike table transfer, no endpoint guard applies here. CAUTION: ``ALTER SCHEMA ... TRANSFER`` does not rewrite the schema name inside the function's stored definition (``sys.sql_modules.definition``). After a transfer, ``get_function`` may still show the *old* schema name in the ``CREATE ... AS`` header, even though the function now lives in the new schema. This tool does not rewrite the definition text. Args: workspace: Workspace name or GUID. item: Warehouse or SQL Analytics Endpoint name or GUID. qualified_name: Current dot-separated qualified function name, e.g. ``dbo.fn_clean_input``. target_schema: Schema to move the function into, e.g. ``archive``.

Move a stored procedure to another schema via ``ALTER SCHEMA ... TRANSFER OBJECT::...``. Stored procedures are supported on both Fabric Data Warehouses and SQL Analytics Endpoints; unlike ``transfer_table``, no endpoint guard is applied here. CAUTION: ``ALTER SCHEMA ... TRANSFER`` moves the procedure but does NOT rewrite the schema name inside its stored definition. After a transfer, ``get_procedure`` may still show the OLD schema name in the ``CREATE ... AS`` header even though the procedure now lives in the new schema. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. qualified_name: Current dot-separated qualified procedure name, e.g. ``dbo.usp_load``. target_schema: Schema to move the procedure into, e.g. ``archive``.

Move a SQL table to another schema via ``ALTER SCHEMA ... TRANSFER OBJECT::...``. Data-Warehouse-only: transferring a table between schemas via T-SQL is not supported on the Fabric SQL Analytics Endpoint and can break the OneLake sync, so SQL Analytics Endpoints are rejected with a ``ToolError``. CAUTION: Permissions granted directly on the table are dropped by the engine when the schema changes. Dependent views and stored procedures that reference the table by its old schema-qualified name are NOT automatically updated and may need refreshing after the transfer. Args: workspace: Workspace name or GUID. item: Warehouse name or GUID. SQL Analytics Endpoints are rejected. qualified_name: Current dot-separated qualified table name, e.g. ``dbo.sales``. target_schema: Schema to move the table into, e.g. ``archive``.

Move a SQL view to another schema via ``ALTER SCHEMA ... TRANSFER OBJECT::...``. Works on both Data Warehouses and SQL Analytics Endpoints — no DW-only guard is applied. CAUTION: ``ALTER SCHEMA ... TRANSFER`` moves the view but does **not** rewrite the schema name inside the view's stored definition (``sys.sql_modules.definition``, ``OBJECT_DEFINITION()``). After a transfer, the returned (and any subsequent ``get_view``) ``definition`` may still show the *old* schema name in the ``CREATE ... AS`` header, even though the view now lives in the new schema. This tool does not rewrite the definition text — doing so would require parsing and regenerating SQL, which this project deliberately avoids. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. qualified_name: Current dot-separated qualified view name, e.g. ``dbo.vw_sales``. target_schema: Schema to move the view into, e.g. ``archive``.

Redefine a T-SQL user-defined function via CREATE OR ALTER FUNCTION. Note: ALTER FUNCTION cannot change the function kind (e.g. scalar to inline TVF). The body must be compatible with the original function's kind. Scalar UDFs and inline TVFs are preview features on Fabric DW as of mid-2026. Function DDL is supported on both Data Warehouses and SQL Analytics Endpoints. CAUTION: ``body`` is executed verbatim as DDL. Ensure the body matches the user's intent before calling this tool. Args: workspace: Workspace name or GUID. item: Warehouse or SQL Analytics Endpoint name or GUID. qualified_name: Dot-separated qualified function name, e.g. ``dbo.fn_clean_input``. body: The new function body (parameter list, RETURNS clause, and implementation).

Redefine a stored procedure via CREATE OR ALTER PROCEDURE. Stored procedures are supported on both Fabric Data Warehouses and SQL Analytics Endpoints. CAUTION: ``body`` is executed verbatim as DDL. Ensure the body matches the user's intent before calling this tool. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. qualified_name: Dot-separated qualified procedure name, e.g. ``dbo.usp_load``. body: The new procedure body (the AS … section).

Rename and/or update the description of a restore point. At least one of *name* or *description* must be provided. Args: workspace: Workspace name or GUID. warehouse: Warehouse name or GUID. restore_point_id: The restore point ID string. name: New display name (max 128 chars). description: New description (max 512 chars).

Update an existing SQL pool. Only the parameters you supply are changed. Args: workspace: Workspace name or GUID. name: Name of the pool to update. max_percent: New max resource percentage (1-100), or omit to keep current. is_default: Set or clear the default flag, or omit to keep current. optimize_for_reads: Enable/disable read optimisation, or omit to keep current. classifier_type: New classifier type, or omit to keep current. classifier_values: New classifier value list, or omit to keep current. Requires workspace admin role. This tool targets a **beta / preview** API.

Update an existing statistic via UPDATE STATISTICS. Only supported on Data Warehouses (SQL Analytics Endpoints are read-only). Args: workspace: Workspace name or GUID. item: Warehouse name or GUID. SQL Analytics Endpoints are rejected. qualified_table: Qualified table name, e.g. ``dbo.sales``. stat_name: Name of the statistic to update. fullscan: When True (default), use WITH FULLSCAN. Ignored when sample_percent is provided. sample_percent: Sample percentage (1-100). When provided, overrides fullscan and uses WITH SAMPLE n PERCENT.

Redefine a SQL view via CREATE OR ALTER VIEW. CAUTION: ``select_body`` is executed verbatim as DDL. Ensure the body matches the user's intent before calling this tool. ``select_body`` must be a single read-only SELECT or WITH (CTE) statement. The guard is always on and fail-closed: a write keyword (DELETE, DROP, INSERT, etc.) or a semicolon anywhere in the body is rejected, even inside a string literal or quoted identifier. If a legitimate view body contains a write keyword (e.g. a column alias 'DELETE'), rewrite the expression to avoid the keyword. Args: workspace: Workspace name or GUID. item: Warehouse or SQL endpoint name or GUID. qualified_name: Dot-separated qualified view name, e.g. ``dbo.vw_sales``. select_body: Single read-only SELECT or WITH (CTE) statement for the new view body. Write keywords and semicolons are rejected fail-closed, even inside string literals or quoted identifiers.