PowerBi Session Control - Inspection Method -

%3CLINGO-SUB%20id%3D%22lingo-sub-1450760%22%20slang%3D%22en-US%22%3EPowerBi%20Session%20Control%20-%20Inspection%20Method%20-%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1450760%22%20slang%3D%22en-US%22%3E%3CP%3EI%20built%20a%20simple%20Session%20Control%20that%20apply%20sensitivity%20labels%20to%20downloaded%20file%20to%20Power%20BI%3C%2FP%3E%3CP%3EThe%20following%20policy%20would%20have%20Sensitivity%20Labels%20on%20download.%3C%2FP%3E%3CP%3EThe%20policy%20works%2C%20when%20data%20is%20downloaded%20on%20PowerBI%20Cloud%2C%20the%20file%20downloaded%20gets%20a%20label.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHowever%20when%20I%20use%20the%20%3CSTRONG%3EInspection%20Method%26nbsp%3B%3C%2FSTRONG%3Eto%20detect%20PCI%20(Credit%20Card)%20in%20the%20downloaded%20file%20therefore%20add%20Sensitivity%20Labels%20only%20when%20%3CSTRONG%3EData%20Classification%20Service%3C%2FSTRONG%3E%20detect%20data%2C%20the%20files%20gets%20downloaded%20without%20any%20labels.%20%3CU%3E(SEE%20POLICY%20ATTACHED)%3C%2FU%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20also%20tried%20the%20Inspection%20Method%20with%20just%20Built-in%20DLP%20and%20custom%20expression.%20As%20soon%20as%20I%20add%20the%20Inspection%20Method%20the%20policy%20is%20bypassed.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20PowerBI%20content%20as%20rows%20of%20DLP%20Test%20Contents.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20I%20set%20the%20Default%20Behavior%20to%20block%2C%20then%20i%20get%20a%20General%20Failure%20(See%20Attached)%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22aa.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F197538i3AD624239CD82F8F%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22aa.png%22%20alt%3D%22aa.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20suggestions%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1450760%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ECloud%20App%20Security%20-%20PowerBi%20Session%20Control%20-%20Inspection%20Method%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1474299%22%20slang%3D%22en-US%22%3ERe%3A%20PowerBi%20Session%20Control%20-%20Inspection%20Method%20-%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1474299%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F643434%22%20target%3D%22_blank%22%3E%40Desm_Phil%3C%2FA%3E%26nbsp%3BThanks%20for%20the%20question!%20Could%20you%20actually%20open%20a%20support%20ticket%20on%20this%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1475417%22%20slang%3D%22en-US%22%3ERe%3A%20PowerBi%20Session%20Control%20-%20Inspection%20Method%20-%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1475417%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F643434%22%20target%3D%22_blank%22%3E%40Desm_Phil%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EHi%2C%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ecan%20you%20confirm%20the%20size%20of%20the%20files%20downloaded%3F%20Also%2C%20trying%20checking%20the%20box%20saying%20%22Treat%20Files%20too%20large%20for%20being%20scanned%20as%20match%22.%20If%20you%20are%20still%20encountering%20an%20issue%2C%20please%20open%20a%20support%20case.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Senior Member

I built a simple Session Control that apply sensitivity labels to downloaded file to Power BI

The following policy would have Sensitivity Labels on download.

The policy works, when data is downloaded on PowerBI Cloud, the file downloaded gets a label.

 

However when I use the Inspection Method to detect PCI (Credit Card) in the downloaded file therefore add Sensitivity Labels only when Data Classification Service detect data, the files gets downloaded without any labels. (SEE POLICY ATTACHED)

 

I also tried the Inspection Method with just Built-in DLP and custom expression. As soon as I add the Inspection Method the policy is bypassed.

 

The PowerBI content as rows of DLP Test Contents.

 

If I set the Default Behavior to block, then i get a General Failure (See Attached)

aa.png

 

 

Any suggestions?

2 Replies

@Desm_Phil Thanks for the question! Could you actually open a support ticket on this? 

@Desm_Phil 

Hi, 

 

can you confirm the size of the files downloaded? Also, trying checking the box saying "Treat Files too large for being scanned as match". If you are still encountering an issue, please open a support case.