How to verify that all data sources are classified correctly and sensitivity labels are applied in Power BI

To verify that all data sources are classified correctly and sensitivity labels are applied in Power BI, follow these steps:

1. Review Data Classification and Sensitivity Labels Policy

Ensure that your organization has a clear policy for data classification and sensitivity labeling. This policy should define the different classifications and labels, their meanings, and the criteria for applying them.

2. Access Power BI Admin Portal

Ensure you have the necessary administrative rights to access the Power BI Admin Portal.

3. Enable Sensitivity Labels in Power BI

If not already done, enable sensitivity labels in Power BI by integrating with Microsoft Information Protection (MIP).

Steps:

1. Go to the Power BI Admin Portal.
2. Navigate to the “Tenant settings.”
3. Find the “Sensitivity labels” section and enable it.

4. Check Sensitivity Labels on Datasets, Reports, and Dashboards

Manually inspect the sensitivity labels on your datasets, reports, and dashboards to ensure they are appropriately labeled.

Steps:

1. Open Power BI Service.
2. Navigate to the workspace containing the datasets, reports, and dashboards.
3. Select a dataset, report, or dashboard.
4. Look for the sensitivity label in the information pane or header.

5. Audit Sensitivity Labels Using Power BI Admin APIs

Use the Power BI Admin APIs to programmatically audit sensitivity labels across your Power BI environment.

Example Using PowerShell:

• Install Power BI Management Module (if not already installed): Install-Module -Name MicrosoftPowerBIMgmt
• Connect to Power BI Service:
  Connect-PowerBIServiceAccount
• Retrieve and Inspect Sensitivity Labels:
  $workspaces = Get-PowerBIWorkspace
foreach ($workspace in $workspaces) {
$datasets = Get-PowerBIDataset -WorkspaceId $workspace.Id
foreach ($dataset in $datasets) {
$sensitivityLabel = Get-PowerBISensitivityLabel -DatasetId $dataset.Id
Write-Output "Workspace: $($workspace.Name), Dataset: $($dataset.Name), Sensitivity Label: $($sensitivityLabel.Label)"
}
}

• Use Microsoft 365 Compliance Center

  Leverage the Microsoft 365 Compliance Center to manage and monitor sensitivity labels applied across your Power BI environment.

  Steps:

  1. Go to the Microsoft 365 Compliance Center.
  2. Navigate to the “Information protection” section.
  3. Review the sensitivity labels applied to content, including Power BI assets.

  5. Regular Review and Update

  Set up a regular review process to ensure data sources remain classified correctly and sensitivity labels are up-to-date.

  Steps:

  1. Schedule periodic reviews (monthly or quarterly) to audit data classification and sensitivity labels.
  2. Use the Power BI Admin APIs and Microsoft 365 Compliance Center for these audits.
  3. Update sensitivity labels as data sources evolve or as new data sources are added.

         6.Monitor and Alert

Set up monitoring and alerting for any changes or misconfigurations in sensitivity labels.

          Steps:

• • Use Power BI activity logs to monitor changes in sensitivity labels.
  • Set up alerts for any unauthorized changes or discrepancies in sensitivity labeling.

By following these steps, you can verify that all data sources in Power BI are classified correctly and that sensitivity labels are appropriately applied, ensuring compliance with your organization’s data governance policies.