Many Microsoft organisations use Sensitivity Labels with encryption to protect sensitive data and meet security, compliance, and governance requirements. While content protected with lower-sensitivity or non-encrypted labels can often be accessed by Fabric services, content protected by higher-sensitivity labels that apply encryption is not currently supported in all scenarios.
This creates challenges for organisations that have adopted a "security first" approach and want to leverage Microsoft Fabric without compromising their data protection standards.
Requested Enhancement
Extend Fabric support to work with content protected by encrypted Sensitivity Labels, while fully respecting existing Microsoft Purview permissions, encryption policies, and user access controls.
Fabric should be able to securely access and process protected content when the authenticated user or service identity already has the necessary rights to view the data.
Benefits
- Better alignment between Fabric and Microsoft Purview Information Protection.
- Enables organisations to maintain strong security controls while adopting Fabric.
- Reduces the need for workarounds, duplicate data storage, or label downgrades.
- Supports enterprise compliance, governance, and zero-trust security strategies.
- Improves adoption of Fabric in highly regulated and security-conscious environments.
As Sensitivity Labels with encryption become increasingly common across Microsoft 365, supporting these scenarios within Fabric would remove a significant barrier for many enterprise customers and help ensure that security and analytics capabilities can work together seamlessly.
