Mandatory label policy for Power BI (preview)

To help ensure comprehensive protection and governance of sensitive data, you can require your organization's Power BI users to apply sensitivity labels to content they create or edit in Power BI. You do this by enabling, in their sensitivity label policies, a special setting for mandatory labeling in Power BI. This article describes the user actions that are affected by a mandatory labeling policy, and explains how to enable a mandatory labeling policy for Power BI.

Note

The mandatory label policy setting for Power BI is independent of the mandatory label policy setting for files and email.

Mandatory labeling in Power BI is not supported for service principals and APIs. Service principals and APIs are not subject to mandatory label policies.

What happens when a mandatory label policy is in effect?

When a mandatory label policy is in effect,

  • In the service:

    • Users must apply a sensitivity label before saving new reports, dashboards, or datasets. If they try to save a new item without applying a label, a dialog prompts them to choose a label before allowing them to save.
    • Users must apply a sensitivity label before saving updates to the settings or content of existing unlabeled reports and dashboards. If they try to save the updates without applying a label, a dialog prompts them to apply a label before allowing them to save.
    • If users try to import data from an unlabeled .pbix file, a dialog prompts them to apply a label before allowing import to continue. The label they select will be applied to the resulting dataset and report in the service. It is not applied to the .pbix file itself. The images below show the dialogs that prompt users to choose and apply a label when they try to save or import unlabeled content. The save button only becomes active when the user selects a label.

    Screenshot of mandatory label dialog.

  • In Desktop:

    • Users must apply a sensitivity label to an unlabeled .pbix file before they will be allowed to save it. If they try to save an unlabeled .pbix without applying a label, a message prompts them to apply a label from the Sensitivity menu on the Home ribbon.
    • Users must apply a sensitivity label to an unlabeled .pbix file before they will be allowed to publish it to the service. If they try to publish an unlabeled .pbix file, a message prompts them to apply a label from the Sensitivity menu on the Home ribbon. After they've applied the label in Desktop and saved their changes, they will be able to publish the file to the service.

    The image below shows the Power BI Desktop message that prompts users to choose and apply a label from the Sensitivity menu on Desktop's Home ribbon.

    Screenshot of mandatory label message in Desktop.

Enabling a mandatory label policy for Power BI

A Microsoft 365 administrator can enable a mandatory label policy for Power BI by selecting the Require users to apply a label to their Power BI content checkbox in the Microsoft 365 compliance center. See What label policies can do.

Screenshot of mandatory label setting in the Microsoft compliance center.

For existing policies, it is also possible to enable mandatory labeling in Power BI using the Security & Compliance Center PowerShell setLabelPolicy API.

Set-LabelPolicy -Identity "<policy name>" -AdvancedSettings @{powerbimandatory="true"}

Where:

  • policy name = the name of the policy where you want to set labeling in Power BI as mandatory.

Requirements for using PowerShell

Documentation

Considerations and limitations

  • Mandatory labeling in Power BI is in preview, so there may be flows that allow the user to create or edit unlabeled content.
  • The mandatory label policy setting for Power BI is independent of the mandatory label policy setting for files and email.
  • Mandatory labeling in Power BI is not supported for service principals and APIs. Service principals and APIs are not subject to mandatory label policies.
  • Mandatory labeling in Power BI is not supported for external guest users (B2B users). B2B users are not subject to mandatory label policies.

Next steps