Identify and resolve T-SQL errors and OneLake shortcut errors.

An engineer creates an internal OneLake shortcut in a Microsoft Fabric Lakehouse that points to a Delta table folder in a second Lakehouse in the same tenant. The shortcut works for the engineer, but a downstream analyst who has been granted read access to the destination Lakehouse receives an access-denied error when querying through the shortcut, even though they can see the shortcut listed. Internal OneLake to OneLake shortcuts use passthrough authentication. What is the most likely cause of the analyst's error?

• ABecause passthrough authentication evaluates the analyst's own identity against the source Lakehouse, the analyst lacks read permission on the source item that the shortcut targets.check_circle Correct
• BInternal shortcuts store the creator's credential, so the analyst is denied because the engineer's delegated token expired and now needs to be refreshed on the shortcut definition.
• CThe shortcut path became stale when the source table was last optimised, so the analyst must delete and recreate the shortcut to point at the current Delta folder location.
• DThe analyst was granted the Viewer role rather than the Contributor role on the destination Lakehouse, and only Contributors may read data that arrives through an internal shortcut.

Why A is correct: OneLake to OneLake shortcuts only support passthrough, so each caller's own identity is checked against the source; the analyst can see the shortcut but is denied because they have no read grant on the source Lakehouse.

Why B is wrong: This describes delegated authentication, which applies to external shortcuts; internal OneLake to OneLake shortcuts never store a creator credential, so there is no token to refresh here.

Why C is wrong: OPTIMIZE rewrites data files but does not move the table folder the shortcut targets, so a stale path would also fail for the engineer rather than only for the analyst.

Why D is wrong: Reading data does not require Contributor, and the destination grant is not the gate; passthrough checks the analyst's access to the source item, which is the real cause.