Default label policy for Power BI (preview)

To help ensure comprehensive protection and governance of sensitive data, organizations can create default label policies for Power BI that automatically apply default sensitivity labels to unlabeled content.

This article describes how to enable a default label policy, both in the Microsoft 365 compliance center and by using the Security & Compliance Center PowerShell setLabelPolicy API.

Note

Currently, default label policies for Power BI are supported only in Power BI Desktop. Default labels will not be applied to unlabeled content in the Power BI service.

The default label policy settings for Power BI are independent of the default label policy settings for files and email.

What happens when a default label policy is in effect?

If a default label policy is in effect, when a user to whom the policy applies opens in Power BI Desktop a new .pbix file or an existing unlabeled .pbix file, the default label will be applied to the file. If the user is offline, the label will be applied when the user signs-in.

Enabling a default label policy for Power BI

A Microsoft 365 administrator can enable a default label policy for Power BI by selecting the desired label in the Apply this label by default to Power BI drop-down menu in the policy settings for Power BI in the Microsoft 365 compliance center. See What label policies can do.

Screenshot of default label setting in the Microsoft compliance center.

For existing policies, it is also possible to enable default label policies for Power BI using the Security & Compliance Center PowerShell setLabelPolicy API.

Set-LabelPolicy -Identity "<default label policy name>" -AdvancedSettings @{powerbidefaultlabelid="<LabelId>"}

Where:

  • <default label policy name> = the name of the policy whose associated sensitivity label you want to be applied by default to unlabeled content in Power BI.

Important

If a user has more than one label policy, the default label setting is always taken from the policy with the highest priority, so be sure to configure the default label on that policy.

Requirements for using PowerShell

Documentation

Considerations and limitations

  • Default label policies are not currently supported in the Power BI service.
  • Default labeling in Power BI is in preview, so there may be flows that allow users to open or create an unlabeled .pbix file.
  • Default label policy settings for Power BI are independent of the default label policy settings for files and email.
  • Default label policies in Power BI are not supported for external guest users (B2B users). When a B2B user opens or creates an unlabeled file in Power BI Desktop, no default label will be applied to the file automatically.

Next steps