How to Apply Sensitivity Labels in Power BI for Data Protection

Protecting sensitive business data is an important part of working with Power BI. In this class, we will look at Power BI sensitivity labels, how they help classify important content, and how you can apply them to reports, semantic models, dashboards, and Power BI Desktop files.

Sensitivity labels come from Microsoft Purview Information Protection. They provide a simple way to classify sensitive content without affecting normal collaboration and productivity.

Strengthen Your Power BI Security
Get expert data protection guidance from Out2sol Global, a leading Power BI Consulting Firm.

What Are Sensitivity Labels in Power BI?

Sensitivity labels help organizations classify and protect content that contains sensitive or confidential information.

In Power BI, you can apply sensitivity labels to different types of content, including:

• Reports
• Semantic models
• Dashboards
• Dataflows
• Power BI Desktop files

For example, a report containing confidential financial information can be assigned an appropriate sensitivity label. This helps your organization apply its information protection policies when the content is shared or exported.

The labels are managed through Microsoft Purview Information Protection, so they can form part of your wider data protection and governance strategy.

How Do Sensitivity Labels Protect Power BI Data?

A sensitivity label provides classification for your Power BI content and can also work with protection settings such as encryption and access restrictions, depending on how the label is configured.

This becomes especially useful when users share or export Power BI content.

Power BI currently supports sensitivity label protection across several export and sharing scenarios, including:

• Excel
• PDF
• PowerPoint
• Analyze in Excel
• Power BI Desktop (.pbix) files

For example, Analyze in Excel can download an Excel file with a live connection to a Power BI semantic model. Applying the appropriate sensitivity label helps maintain the organization's protection requirements for supported scenarios.

Applying Sensitivity Labels to API-Based Power BI Data

Sensitivity labels can also be used when your Power BI solution gets data from an external API.

The basic process is:

1. Connect Power BI to the API using the Power BI Web connector or a custom connector.
2. Import and model the API data.
3. Create the Power BI dataset and report.
4. Publish the report or dataset to Power BI Service.
5. Apply the appropriate sensitivity label to the Power BI content.
6. Configure the label according to your organization's protection requirements.

The important point here is that the API itself is external to Power BI. The API does not automatically recognize or enforce Power BI sensitivity labels.

If the API contains sensitive information, you should also make sure that the API security and data transmission meet your organization's security standards, such as using HTTPS.

How to Apply Sensitivity Labels in Power BI Service

Once your report has been published to Power BI Service, you can apply a sensitivity label directly from the report settings.

Step 1: Publish the Report

First, publish your Power BI report to Power BI Service.

Once the report is available in the workspace, you can configure its sensitivity label.

Step 2: Open Report Settings

Open the report in Power BI Service.

Then:

1. Open the Settings menu.
2. Find the Sensitivity label section.
3. Open the sensitivity label drop-down list.
4. Select the appropriate label.
5. Select Save to apply the change.

The selected label is now associated with the report.

How to Apply Sensitivity Labels to a Semantic Model

You can also apply a sensitivity label to a semantic model in Power BI Service.

Step 1: Open the Semantic Model Options

Go to your workspace and locate the required semantic model.

Select More options (...) next to the semantic model.

Step 2: Open Settings

Select Settings from the available options.

Then expand the Sensitivity labels section.

Step 3: Select the Label

Choose the appropriate sensitivity label from the drop-down list.

Select Apply to save the setting.

This allows the semantic model to have its own classification and protection configuration.

How to Apply Sensitivity Labels in Power BI Desktop

Sensitivity labels can also be applied directly in Power BI Desktop.

Before applying a label, your organization needs to have sensitivity labels enabled, and you must meet the required licensing and access requirements.

Prerequisites

The class covers the following requirements:

• Power BI Pro or Premium license.
• Azure Information Protection Premium P1 or P2 license.
• Sensitivity labels enabled for your organization.
• Membership in a security group that is allowed to apply sensitivity labels.

If the sensitivity option is not available in Power BI Desktop, your Power BI administrator may need to configure the required organization settings.

Step 1: Sign In to Power BI Desktop

Open Power BI Desktop and sign in with your organizational account.

Step 2: Select the Sensitivity Label

Open the Sensitivity option from the Power BI Desktop ribbon.

Select the appropriate sensitivity label from the available options.

The label is then applied to the Power BI Desktop content according to your organization's configuration.

What Are the Main Limitations?

There are a few important points to remember when working with sensitivity labels.

First, an external API does not automatically recognize or enforce Power BI sensitivity labels. API security therefore needs to be handled separately.

Second, exporting or sharing Power BI content depends on the supported protection and labeling configuration.

Finally, sensitivity labels need to be properly configured by the organization. Simply having Power BI access does not necessarily mean every user can apply labels.

Why Are Power BI Sensitivity Labels Important?

Sensitivity labels help organizations bring data classification into their Power BI environment.

They can help your team:

• Identify sensitive Power BI content.
• Apply consistent data protection policies.
• Protect information when supported content is shared or exported.
• Support data governance and compliance requirements.
• Reduce the risk of sensitive information being handled incorrectly.

The goal is not to make Power BI harder to use. Instead, sensitivity labels provide a classification and protection layer while allowing users to continue working with their reports and data.

Final Thoughts

In this class, we looked at how Power BI sensitivity labels can be used to classify and protect important business content.

We covered how to apply labels to reports, semantic models, and Power BI Desktop files, along with the basic requirements for using Microsoft Purview Information Protection with Power BI.

For organizations working with confidential or regulated information, setting up the right labeling and data protection strategy is an important part of Power BI governance.

If you need help with Power BI security, data governance, or implementing Microsoft Purview protection, Out2sol Global can help you with practical Power BI Consulting services based on your business requirements.

See you next time with another Power BI topic.

Disclaimer: All logos, trademarks, and brand names used in this document are the property of their respective owners. Their use here is for identification purposes only and does not imply endorsement.