Forum Discussion
nsakthi
Microsoft
Jan 04, 2024Microsoft Fabric Tenant Settings - Reports
Microsoft Fabric is a unified platform that combines data and services, encompassing data science, data engineering, data lakehouses, data warehouses and visualizations, to enhance your team’s data utilization. Discover how to leverage Fabric’s features like OneLake, Data Factory, Synapse, Data Activator, Power BI, and Microsoft Purview to usher your data into the AI era.
Tenant settings provide a detailed level of control over the features accessible to your organization. If you’re worried about sensitive data, some features may not be suitable for your organization, or you may want to limit certain features to specific groups.
While tenant settings that govern the availability of features in the Power BI user interface can aid in setting up governance policies, they do not serve as a security measure. For instance, the ‘Export data’ setting does not limit a Power BI user’s permissions on a semantic model. Power BI users with read access to a semantic model have the right to query this model and may be able to save the results without utilizing the ‘Export data’ feature in the Power BI user interface.
By extracting and externally visualizing tenant settings in Power BI reports, stakeholders can view, archive, and compare these settings with historical data. This approach negates the need for higher privileges and access to the Microsoft Fabric (previously Power BI) admin portal.
Learn more about the tenant settings: About tenant settings - Microsoft Fabric and Tenant settings index - Microsoft Fabric
To generate a tenant settings report using REST API, you can use the following steps:
- Obtain an access token from Microsoft Entra (aka Azure Active Directory) by following this guide: OAuth 2.0 client credentials flow on the Microsoft identity platform
- Use the access token to call the Fabric REST API endpoint for tenant settings: Tenants - Get Tenant Settings - REST API
- Parse the JSON response and extract the relevant information for your report.
You can obtain the Power BI Template file from this location: Microsoft Fabric Tenant Settings.pbit (github)
Enter the Tenant ID, Client ID, and Client Secret associated with the service principal that has the necessary permissions to retrieve the Tenant Settings.
Please refer to the following documents to understand how to set up a service principal.
Power BI REST APIs and Enable service principal authentication for read-only admin APIs
Save the file as PBXI and upload it to the relevant workspace for sharing with stakeholders or co-administrators.
-
Take advantage of the ability to capture snapshots of the settings for audit purposes and historical comparison
-
Set up alerts for any new additions or modifications
-
Set up automatic email exports for record-keeping
Here are several methods for retrieving Microsoft Fabric tenant settings via the REST API using M query, Python, and PowerShell.
Extracting tenant settings from Microsoft Fabric using PowerShell and the REST API
Extracting tenant settings from Microsoft Fabric using Python and the REST API
No RepliesBe the first to reply