Maklum balas Edit

Default label policy for Power BI

  • Artikel
  • 2 minit untuk dibaca

To help ensure comprehensive protection and governance of sensitive data, organizations can create default label policies for Power BI that automatically apply default sensitivity labels to unlabeled content.

This article describes how to enable a default label policy, both in the Microsoft Purview compliance portal and by using the Security & Compliance Center PowerShell setLabelPolicy API.

Note

The default label policy settings for Power BI are independent of the default label policy settings for files and email.

What happens when a default label policy is in effect?

  • In Power BI Desktop, when a user to whom the policy applies opens a new .pbix file or an existing unlabeled .pbix file, the default label will be applied to the file. If the user is working offline, the label will be applied when the user signs in.
  • In the Power BI service, when a user to whom the policy applies creates a new dataset, report, dashboard, dataflow or scorecard, the default label will be applied to that item.

Enabling a default label policy for Power BI

A Microsoft 365 administrator can enable a default label policy for Power BI by selecting the desired label in the Apply this label by default to Power BI drop-down menu in the policy settings for Power BI in the Microsoft Purview compliance portal. See What label policies can do.

Screenshot of default label setting in the Microsoft compliance center.

For existing policies, it is also possible to enable default label policies for Power BI using the Security & Compliance Center PowerShell setLabelPolicy API.

Set-LabelPolicy -Identity "<default label policy name>" -AdvancedSettings @{powerbidefaultlabelid="<LabelId>"}

Where:

  • <default label policy name> = the name of the policy whose associated sensitivity label you want to be applied by default to unlabeled content in Power BI.

Important

If a user has more than one label policy, the default label setting is always taken from the policy with the highest priority, so be sure to configure the default label on that policy.

Requirements for using PowerShell

Documentation

Considerations and limitations

  • Default labeling in Power BI covers most common scenarios, but there may be some less common flows that still allow users to open or create unlabeled .pbix files or Power BI artifacts.
  • Default label policy settings for Power BI are independent of the default label policy settings for files and email.
  • Default labeling in Power BI is not supported for service principals and APIs. Service principals and APIs are not subject to default label policies.
  • Default label policies in Power BI are not supported for external guest users (B2B users). When a B2B user opens or creates an unlabeled .pbix file in Power BI Desktop or Power BI artifact in the Power BI service, no default label will be applied automatically.

Next steps