Sensitivity labels—the feature initially introduced in Microsoft 365, permits users to classify and secure data founded on their organizational policies. Microsoft Power BI integrates seamlessly with sensitivity labels, enabling users to apply these labels directly to datasets and reports. These labels assist users in managing the accessibility and security levels of sensitive data. Moreover, they help in maintaining compliance standards across the organization.
Applying sensitivity labels in Power BI
Sensitivity labels can be applied to datasets, reports, and dashboards in Power BI. Here’s how you can do it:
- In the workspace section, select a report or dashboard you want to assign a label.
- Under ‘Settings’, click on ‘Security’ and then on ‘Sensitivity label’. Click on the ‘Assign sensitivity label’ option.
- A dialog box will appear allowing you to select from various default labels such as ‘Public’, ‘General’, ‘Confidential’, etc., or you can create a new sensitivity label by selecting the ‘Custom’ option.
- After selecting the appropriate label, click ‘Save’ to apply the label.
After applying, one can observe a symbol representing the assigned sensitivity label in the bottom-right corner of reports and dashboards.
Effect of sensitivity labels in Power BI
After applying sensitivity labels, you can monitor and track how data is being used and shared across your organization. Unauthorised users can’t access data labeled as ‘Highly Confidential,’ ensuring data privacy. Additionally, reports can’t be exported to unsecured file formats, safeguarding sensitive data from potential threats.
When a report with a sensitivity label gets shared or exported, the system sends an alert to the owner. This feature enhances data management by keeping owners informed about the whereabouts of their data.
Protection options with sensitivity labels
Sensitivity labels in Power BI come with four protection options:
Option | Description |
---|---|
Mark Content | Adds metadata to content, which can be tracked |
Encrypt Data | Prevents unauthorized access and secures data |
Prevent Data Loss | Blocks content from being shared with unauthorized users |
Access Denial | Restricts access to labeled content |
Each protection option offers different barriers, and when used in combination, they provide comprehensive security for workspace content.
Wrap Up
In conclusion, the application of sensitivity labels in Power BI allows businesses to manage and protect sensitive data. Leveraging sensitivity labels to classify and protect information can help organizations maintain data privacy and compliance and ensure that only authorized users have access to sensitive data. Every organization dealing with critical data should consider utilizing this security feature in Power BI.
Practice Test
True or False: Sensitivity labels in Microsoft Power BI can be used to help protect and govern your data.
- True
Answer: True
Explanation: Sensitivity labels can be used to provide a powerful and flexible method to protect and govern your data, no matter where it travels.
Which option describes the option to apply sensitivity labels to Power BI workspace content?
- A. Enable label inheritance
- B. Apply label preview
- C. Enable sensitivity insights
- D. Broadcast label application
Answer: A. Enable label inheritance
Explanation: The “enable label inheritance” feature can be used in Power BI to ensure sensitivity labels are applied to all pieces of workspace content.
True or False: Sensitivity labels applied to Power BI datasets are automatically applied to reports and dashboards built upon those datasets.
- True
Answer: True.
Explanation: When you apply sensitivity labels to a dataset in Power BI, those labels get automatically applied to any reports or dashboards built on them to ensure data governance and protection across your dataflow.
What is the effect of sensitivity labels in Power BI?
- A. Control access to data
- B. Track data usage
- C. Document data behavior
- D. All of the above
Answer: D. All of the above
Explanation: Sensitivity labels provide a means to categorize data based on its sensitivity, control access to the data, track its usage, and document its behavior.
True or False: Sensitivity labels in Power BI are visible to all users, regardless of their access level.
- False
Answer: False
Explanation: Sensitivity labels aren’t necessarily visible to all users. They are primarily designed for admins, and a user’s ability to see and interact with labels is influenced by their access level and permissions.
Applying sensitivity labels to Power BI workspace content requires which role?
- A. Member
- B. Viewer
- C. Admin
- D. Contributor
Answer: C. Admin
Explanation: You need to be an Admin to apply sensitivity labels to workspace content in Power BI. Members, viewers and contributors do not have permission to make these changes.
True or False: Sensitivity labels cannot be applied to individual tables or columns in a Power BI dataset.
- True
Answer: True
Explanation: Currently, sensitivity labels in Power BI are applied at the dataset level, rather than at the level of individual tables or columns.
Which of the following are benefits of applying sensitivity labels to workspace content? (Select all that apply)
- A. Enhanced data protection
- B. Improved data governance
- C. Increased data usage
- D. Simplified compliance
Answer: A. Enhanced data protection, B. Improved data governance, D. Simplified compliance
Explanation: Applying sensitivity labels to workspace content provides a number of benefits including enhanced data protection, improved data governance and simplified compliance. It does not directly result in increased data usage.
True or False: Application of sensitivity labels requires no additional configuration in Power BI.
- False
Answer: False
Explanation: To use sensitivity labels in Power BI, certain configuration settings need to be enabled.
Sensitivity labels applied to Power BI workspace content are enforced at which level?
- A. Dataset level
- B. Report level
- C. Workspace level
- D. All of the above
Answer: D. All of the above
Explanation: Sensitivity labels applied to workspace content in Power BI are effectively enforced across all related data assets including datasets, reports and the workspace itself.
Interview Questions
What are sensitivity labels in Power BI?
Sensitivity labels in Power BI are used to classify and protect sensitive data according to its level of confidentiality.
How can you apply sensitivity labels to workspace content in Power BI?
You can apply sensitivity labels to workspace content in Power BI via Power BI service, by selecting an individual dataset, report or dashboard, choosing the “Security” option from the “More options” menu, and then selecting the appropriate label.
What are some of the label classifications you can assign a Power BI workspace?
Some of the label classifications include Personal, Public, General, Confidential, and Highly Confidential.
Can you apply sensitivity labels at the dataset level?
Yes, sensitivity labels can be applied directly on datasets and this label will be inherited by reports and dashboards that are built on top of it.
Can sensitivity labels be applied to Power BI content during the import process?
Yes, if a data source like Excel or PowerPoint has a sensitivity label, the label can be carried over and applied to the Power BI content during the import process.
What is the role of the Microsoft 365 Compliance Center in sensitivity labeling in Power BI?
The Microsoft 365 Compliance center is used to create and manage the sensitivity labels that can then be applied within Power BI.
Can the users see the sensitivity labels applied to the Power BI reports?
Yes, the users can see the sensitivity labels in the header of the Power BI report or dashboard.
Can you change or remove the sensitivity label once it is applied to the Power BI data?
Yes, you can change or remove the sensitivity label from the content in order to adapt to any changes in the classification and protection needs of the data.
What happens when conflicting sensitivity labels are applied at the dataset level and the report level?
The sensitivity label applied at the report level takes precedence over the label applied at the dataset level.
Can Power BI service automatically apply sensitivity labels?
No, as of today Power BI service does not automatically apply sensitivity labels. They need to be manually applied to the datasets, reports, and dashboards.
Can sensitivity labels be enforced when exporting Power BI content?
Yes, the sensitivity labels along with the protection policies can be enforced when the Power BI content is exported to Excel, PowerPoint, and PDF.
Can the sensitivity labels applied to the Power BI data be viewed in the audit logs?
Yes, the application, change or removal of sensitivity labels can be viewed in the audit logs in the security and compliance center.
What are the prerequisites to apply sensitivity labels in Power BI?
The prerequisites include having sensitivity labels configured in the Microsoft 365 compliance center and having appropriate permissions(Writing access or admin access) to the Power BI content.
Which edition of Power BI supports the use of sensitivity labels?
The sensitivity labels are supported in Power BI Pro, Power BI Premium and Power BI Embedded.
Can you use sensitivity labels with Power BI paginated reports?
As of March 2021, sensitivity labels are not supported with Power BI paginated reports.