Dashboard data classifications

Dashboard data classifications allow administrators of Power BI to define data security classifications for dashboards in the Power BI service. Once configured in the Power BI admin portal, Power BI Pro users responsible for creating and editing dashboards in app workspaces can associate one of the available classifications to each dashboard. Additionally, the classification tags can be linked to external URLs to provide users with additional information, such as the organization's definitions and policies for each data classification.

The data security tags, such as Confidential or Public, serve to raise awareness regarding the sensitivity of the content and thus reduce the risk that protected data is inappropriately exposed or distributed.

For example, an organization could allow certain security groups of users to share Power BI content with users outside of the organization but, as an organizational policy, require that this content matches certain data classifications, such as public or low business impact.

In the following screenshot from the Power BI admin portal, four dashboard data classifications have been configured:

Dashboard data classifications

In the preceding example, the Organizational classification has been defined as the default data classification. This setting causes all new dashboards and any existing dashboard which have not been assigned to a different classification to be tagged as Organizational. For usability and reference purposes, a three-letter shorthand acronym and a URL link to a corporate site have been assigned to each classification, respectively.

The Power BI admin portal can be accessed via the Settings (gear) icon in the top-right corner of the Power BI service. Only Office 365 global admins or users mapped to the Power BI admin role will have visibility to tenant settings within the Power BI admin portal, which includes data classification for dashboards.

Chapter 12Administering Power BI for an Organization, reviews the Power BI admin role as well as the settings available in the Power BI 
admin portal extensively. Additionally, the Power BI project roles section in Chapter 1Planning Power BI Projects, introduces the Power BI admin role and contains an example of assigning the Power BI service administrator role to a user in the Office 365 admin center.

With the data classifications for the organization configured, a user with edit rights to a dashboard can assign a classification via the Dashboard settings menu, as shown in the following screenshot:

Dashboard settings

In the preceding example for the Global Sales dashboard, the default Organizational classification is switched to Confidential. The Dashboard settings menu can be accessed from within a dashboard by clicking the ellipsis (three dots) to the right of the Web view/Phone view dropdown. Alternatively, the settings for a dashboard can be accessed from outside the dashboard via the gear icon in the ACTIONS group within the app workspace.

In the following screenshot, the shorthand tag of the Data classification assigned to each dashboard is populated in the workspace:

Dashboards in app workspace

Just like the icons under the ACTIONS group, hovering the cursor over the CLASSIFICATION tag (for example, CON,) creates a pointing icon and displays the full name of the classification (Confidential) as a tool tip. Clicking the tag will open the URL associated with the given classification in a separate browser tab.

Data classifications are deleted if the feature is turned off in the the Power Admin Portal. Additionally, if a classification is removed, any dashboards assigned to the removed classification will be assigned back to the default until the dashboard owner changes the classification. Finally, if the default classification is changed, all dashboards that weren't already assigned a classification type will change to the new default.

Given the importance of data security and the risk involved in re-creating work for both the Power BI Admin(s) and report and dashboard authors, the teams responsible for deploying Power BI should ensure these classifications align with corporate data governance standards.
..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset
18.117.75.70