Default label policy for Fabric and Power BI

To help ensure comprehensive protection and governance of sensitive data, organizations can create default label policies for Fabric and Power BI that automatically apply default sensitivity labels to unlabeled items.

This article describes how to enable a default label policy, both in the Microsoft Purview compliance portal and by using the Security & Compliance PowerShell setLabelPolicy API.

• In Power BI Desktop

  When a user to whom the policy applies opens a new .pbix file or an existing unlabeled .pbix file, the default label is applied to the file. If the user is working offline, the label is applied when the user signs in.

• In Fabric

  When a user to whom the policy applies creates a new item, the default label is applied to that item.

  When a user to whom the policy updates an unlabeled item:

  • If the item is a Power BI item, a change to any of its attributes causes the default label to be applied if the user doesn't apply a label.

  • Если элемент не относится к Power BI Fabric, то только изменения в определённых атрибутах, таких как имя и описание, приводят к применению метки по умолчанию. And this is only if the change is made in the item's flyout menu. Для изменений, внесенных в пользовательский интерфейс, метка по умолчанию в настоящее время не поддерживается.

A Microsoft 365 administrator can enable a default label policy for Fabric and Power BI by selecting the desired label in the Apply this default label to Power BI content dropdown menu in the policy settings for Power BI in the Microsoft Purview compliance portal. For more information, see What label policies can do.

For existing policies, it's also possible to enable default label policies for Fabric and Power BI using the Security & Compliance PowerShell setLabelPolicy API.

Set-LabelPolicy -Identity "<default label policy name>" -AdvancedSettings @{powerbidefaultlabelid="<LabelId>"}

Где:

• <default label policy name> is the name of the policy whose associated sensitivity label you want to be applied by default to unlabeled items in Fabric and Power BI.

Requirements for using PowerShell

• The Exchange Online PowerShell V2 (EXO V2) module. For more information, see About the Exchange Online PowerShell V2 module
• A connection to the Microsoft Purview compliance portal. For more information, see Connect to Security & Compliance PowerShell

• Admin Guide: Custom configurations for the Azure Information Protection unified labeling client
• Создание и настройка меток конфиденциальности и соответствующих политик
• Set-LabelPolicy documentation

• Default labeling in Fabric Power BI covers most common scenarios, but there might be some less common flows that still allow users to open or create unlabeled .pbix files or Fabric items.
• Default label policy settings for Fabric and Power BI are independent of the default label policy settings for files and email.
• Default labeling in Fabric and Power BI isn't supported for service principals and APIs. Service principals and APIs aren't subject to default label policies.
• Default label policies in Fabric and Power BI aren't supported for external guest users (Microsoft Entra B2B). When a B2B user opens or creates an unlabeled .pbix file in Power BI Desktop or Fabric or Power BI item in Fabric, no default label is applied automatically.

• Mandatory label policy for Power BI