Enabling Sensitivity Label On Powerbi reports on Workspace and Desktop

[Roomie117]

I have a Microsoft E5 license and would like to apply sensitivity labels using Microsoft Purview in Power BI workspaces and Power BI Desktop. My goal is to control data sharing—specifically, to restrict users from sharing data (exported from power Bi tables) outside the project—while still allowing other developers access as needed.

However, I do not currently have access to the Microsoft 365 Compliance Center or Admin Console to configure sensitivity labels. Should I request access from our Power BI team, or is this something that needs to be provided by the Microsoft 365 or security administration team?

Questions:

1. Does enabling and using sensitivity labels incur any additional costs beyond the Microsoft E5 license?
   (If yes, how much does it cost?)

2. What are the limitations when using sensitivity labels with Power BI?

3. If one user (with admin rights) enables and configures sensitivity labels in the admin console and applies them to reports, can other users with Power BI Pro licenses also view, apply, or inherit those same labels?

[v-venuppu · Accepted solution]

Hi @Roomie117 ,

Thank you for reaching out to Microsoft Fabric Community.

You’ll need help from your Microsoft 365 or security/compliance admin team - not just the Power BI team. They have to:

• Create and publish sensitivity labels in Microsoft Purview / Compliance Center
• Enable the labels for Power BI use

Once that’s done, you (and other users) will see those labels in Power BI Desktop and Service.

Here are answers to your questions:

1.Does enabling and using sensitivity labels incur any additional costs beyond the Microsoft E5 license?
(If yes, how much does it cost?)

Ans:No.If you already have an E5 license, sensitivity labels are included - no extra cost.

2.What are the limitations when using sensitivity labels with Power BI?

Ans:a.Labels don’t block data sharing by themselves. You’ll need DLP (Data Loss Prevention) or Defender for Cloud Apps to actually block exports, copy-paste, etc.

b.Labels apply to datasets and reports, not dashboards.

c.They don’t enforce row-level security - you still have to set that up separately.

3.If one user (with admin rights) enables and configures sensitivity labels in the admin console and applies them to reports, can other users with Power BI Pro licenses also view, apply, or inherit those same labels?

Ans:Yes, Once the admin sets it up:

• Other users with Power BI Pro can see and use the labels (if included in the label policy).
• Reports and datasets keep their labels when shared or moved across workspaces.

If this post helps, then please consider Accepting as solution to help the other members find it more quickly, don't forget to give a "Kudos" – I’d truly appreciate it! 

Thank you.