LakeWarden

Governance, access, and operations for Microsoft Fabric — in one place.

Access review, refresh health, capacity consumption, connections, audit, scorecards, and one-click accelerators. No agents to install, no data to export — it runs on your own Entra identity.

Secure delegated sign-in · No service-principal secrets to share · Your data never leaves your tenant

Access Review & Management

See who can touch every workspace, spot risky access, and assign roles by dragging users and groups — with preview before save.

Refresh & Capacity Health

Catch failing refreshes, schedule collisions, throttling pressure, and CU overage before they hit your users.

One-click Accelerators

Deploy production-ready medallion, MLOps, CDC, and BI patterns into your tenant in seconds — fully wired and bound.

Governance Scorecards

Per-workspace governance grades and a tenant-wide health score that turns sprawl into an action list.

Simple, per-tenant pricing

One subscription covers every user in your organization. Start free, no card required.

LakeWarden
$499 / month
  • Unlimited users in your tenant
  • All governance, ops, and capacity tooling
  • Unlimited accelerator deployments
  • Access review & visual role assignment
  • 14-day free trial — cancel anytime
© LakeWarden. Not affiliated with Microsoft. Contact sales
🔑

You're signed in — let's activate your subscription

Your organization doesn't have an active LakeWarden subscription yet.

Start a free 14-day trial to unlock the full console for everyone in your tenant. No credit card required.

Questions? Talk to us

LakeWarden
0%
Scanning your Microsoft Fabric tenant
Preparing…
Estimating time remaining…

    LakeWarden

    Command Center

    The governance pulse of your Fabric tenant. Panels light up as scans run — or run everything at once.

    Needs attention

    Recent tenant activity

    Workspace Inventory

    View all →

    Workspaces

    Explore, filter, and manage every workspace. Click one for items, access, and creation actions.

    Access Review & Management

    Scan workspace roles, explore your Entra ID people & groups, and visually assign access by dragging users onto workspaces.

    Access graph

    Interactive network: workspaces (green boxes) connected to principals. Guests red, groups orange squares, service principals purple. Thick dark edges = Admin.

    Users

    Click Load from Entra ID to populate.

    Security Groups

    Click a group to pin it — pinned groups appear in the Workspace Access tab

    Load users first.

    Drag a user bubble or group chip onto a workspace row to stage an assignment. Review staged changes before applying.

    Workspaces

    Drop users or groups here to stage assignments

    People

    Pinned Groups

    Best-practice templates

    Common Fabric governance group patterns — click to create or use as naming guide.

    Operations Health

    Refresh failures, recent job runs, and schedule collisions across all workspaces.

    Capacity Health & Utilization

    Queries the Capacity Metrics app's Usage Summary tables: per-capacity health, CU utilization over time, throttling pressure, and overage — with an optimization advisor. Requires the Capacity Metrics app installed and access to its workspace.

    Connections

    Every connection your account can see: duplicates, access models, owners, and cleanup candidates. The API doesn't expose live status or last-used dates (yet), so analysis focuses on inventory and access hygiene.

    Accelerators

    One-click deployment of linked, convention-named Fabric architectures. Pick a blueprint, a target workspace, and a project prefix — items are created wired together.

    Items are created as you (Item.ReadWrite.All). The workspace must be on a Fabric capacity. Notebooks are pre-bound to their lakehouses by ID — open one after deploy and the default lakehouse is already attached.

    Governance Scorecard

    Per-workspace governance grade. Run an Access Review scan first; an Ops scan improves accuracy.

    History AUTOMATED

    Tenant snapshots collected automatically by the service principal (no user sign-in needed). Compare any two days to see exactly what changed.

    Compare two snapshots

    Audit ADMIN

    Tenant activity log — every recorded action across Fabric. Requires the Fabric administrator role (the Tenant.Read.All permission is already on the app registration).

    Global Search

    Search all workspace and item names. First search runs a full scan.

    OneLake Explorer

    Browse the full OneLake file hierarchy — workspaces, lakehouses, tables, Delta files, and Delta logs. Expands on demand. Requires OneLake storage access (storage.azure.com/user_impersonation).