Question

Does Power BI’s sensitivity labels feature support multi-tenant scenarios?
I’m working in an environment that includes users across multiple tenants and need to ensure consistent data governance. Does Power BI support applying and enforcing sensitivity labels in multi-tenant scenarios, and what limitations should I be aware of?

Answer 1

Power BI's sensitivity labels partially support multi-tenant scenarios, but there are significant drawbacks to take into account.

Sensitivity labels are applied using Power BI's integration with Microsoft Purview Information Protection, and they are mainly enforced within the same tenant. Label inheritance and enforcement might not fully transfer to the other tenant in multi-tenant environments, such as when reports or datasets are shared across organizational boundaries. For instance, depending on the recipient's capabilities and policies, if a report with a sensitivity label is shared externally via B2B sharing, the label might still be visible. Still, protection settings like encryption might not be applied outside of the original tenant.

To guarantee uniform data governance in situations involving multiple tenants:

• When possible, use cross-tenant sensitivity label policies.
• Integrate Microsoft Purview compliance guidelines with Power BI tenant settings.
• Be mindful that the target tenant may not apply the label, or it may deteriorate.