MC1274552 - Microsoft Purview | Data Security Posture Management for AI Fabric integration in data risk assessment
Service
Published
Tag
Platforms
Summary
Microsoft Purview DSPM (preview) will add a Fabric tab for Data Risk Assessment to detect and manage oversharing of sensitive data in Microsoft Fabric workspaces. Rolling out mid-April to early May 2026, admins must enable scanning and can then view and secure Fabric artifacts like dashboards and reports.
More information
Introduction
To help organizations understand and reduce data oversharing risks in Microsoft Fabric, Purview DSPM's (preview) Data Risk Assessment now scans all Fabric workspaces for key oversharing insights like sensitivity label and access activity. This update enables admins to identify potentially overshared Fabric artifacts—such as dashboards and reports—and take proactive steps to secure sensitive data across Fabric and Power BI workloads.
This message is associated with Microsoft 365 Roadmap ID 553217.
When this will happen:
General Availability (Worldwide): We will begin rolling out in mid-April 2026 and expect to complete by early May 2026.
How this affects your organization:
Who is affected:
- Microsoft 365 tenants using Microsoft Purview Data Security Posture Management (preview)
- Organizations with Microsoft Fabric workspaces
- Purview admins, Global admins, and Fabric admins
What will happen:
- A new Fabric tab will appear at the top of DSPM Data Risk Assessments.
- Admins can view default oversharing assessment results for Fabric artifacts (for example, dashboards and reports).
- Admins can take protective actions to secure sensitive Fabric data.
- Oversharing insights for Fabric data are centralized within the new Fabric tab.
- A one‑time setup is required to allow Purview to scan Fabric workspaces.
- This feature is not enabled automatically; admin action is required to start scanning.
What you can do to prepare:
- Coordinate with your Fabric admin and Global admin to enable the Fabric Oversharing Assessment in Microsoft Purview. This involves setting up an Entra Application as a service principal.
- Update internal security and governance documentation to reflect the new Fabric oversharing insights.
- Share this change with security and analytics stakeholders who manage Fabric data.
Compliance considerations:
No compliance considerations identified, review as appropriate for your organization.