Everything you need to govern, protect, and prove
Fabric Control is a complete operational layer for Microsoft Fabric. Here's what's inside, from the free governance tier to the paid capabilities you add as you grow.
The governance tier
The free tier isn't a teaser. It's the full governance product for your own Azure tenant, the same engine that powers everything above it.
Control-plane visibility
A single view of your tenant's operational state: workspace health, capacity utilization, refresh outcomes, and configuration, at a glance, with a year of its history retained.
Metadata-only, your choice
Fabric Control reports operational metadata only. Your data content never leaves your boundary, and you control how much metadata you share above a small required baseline.
Configuration drift detection
Know when something changed. Fabric Control tracks configuration and entitlement drift so surprises surface before they become incidents.
Entitlement visibility
See who has access to what across your Fabric environment, surfaced in one place instead of buried in per-workspace settings.
Switch on the full system
Paid capabilities come as two flat-fee tiers, not a menu of individual modules: add Backup first, then the full Operations package when you need it.
Backup & recovery
Automated, scheduled, versioned backup of workspaces, tables, semantic-model definitions, and pipeline definitions, landing in your own storage, under your own keys, with point-in-time and table-level recovery. Restore-dependency sequencing that brings the estate back in the right order is in development and not yet part of the beta. Restore an entire backup into another capacity, or a single object or table back in place or somewhere else, for everyday recovery, migration, and dev/test, not disaster recovery alone.
- Backups land in your own storage, under your own keys
- Point-in-time recovery (restore sequencing in development)
- Restore into another capacity, or a single object or table
- Verified test restore & integrity catalog
- Flat-fee pricing with defined limits
The first paid tier. A backup that can't restore isn't a backup: recovery you can prove, not assume.
Operations
The mature-operations layer, delivered as one package: SLA tracking with blast-radius impact, access governance, per-capacity cost attribution, and a universal pipeline logging engine. Know what would break before it breaks, and where the spend goes.
- SLA tracking & blast-radius simulation
- Access governance & RLS audit
- Per-capacity cost attribution
- Universal pipeline logging: one API call, auto-discovered
Bundled into the Operations tier: one package, not a menu, with or without Backup.
Your data stays put. Only metadata moves.
Fabric Control never transfers your data content to an external system, and you decide how much metadata it does share.
- No data content leaves your tenant. The contents of your tables, files, and reports stay inside your boundary, always.
- Only operational metadata is shared: the information that describes your environment, not the data in it.
- You control the metadata footprint. A small baseline is required to function; everything above it is your choice, adjustable at any time.
- Credentials stay yours. Access is granted through a service principal you create, scoped and revocable at any time. Once a revocation takes effect, Fabric Control can no longer reach your tenant.
See it against your own tenant
Join the beta. Free forever for one Azure tenant, no card, and Backup free for 3 months for early adopters.