fabric-pbi-security-remediatelisted

Diagnose and resolve Microsoft Fabric Power BI security issues including row-level security (RLS), object-level security (OLS), column-level security (CLS), workspace permissions, sensitivity labels, service principal authentication, XMLA endpoint access, DirectLake security fallback, Entra ID app registration, and data loss prevention (DLP) policy restrictions. Use when remediate access denied errors, missing data in reports, broken visuals from OLS, RLS not filtering, sensitivity label problems, permission model conflicts, or capacity-related security issues.
PatrickGallucci/fabric-skills · ★ 13 · Data & Documents · score 81

Install: claude install-skill PatrickGallucci/fabric-skills

# Microsoft Fabric Power BI Security remediate Systematic diagnostic toolkit for resolving security and access control issues across the Microsoft Fabric Power BI stack. Covers workspace permissions, data-level security (RLS/OLS/CLS), sensitivity labels, service principal access, and governance policy restrictions. ## When to Use This Skill - User reports "access denied" or "unauthorized" errors in Power BI reports or workspaces - Report visuals show blank data or "field cannot be found" errors - RLS filters are not applying correctly or returning unexpected data - Sensitivity labels are greyed out, blocking exports, or preventing publishing - Service principal cannot access workspaces or semantic models - DirectLake reports fall back to DirectQuery unexpectedly due to security - DLP or Purview protection policies are blocking item access - Workspace role assignments are not behaving as expected - XMLA endpoint connections fail with permission errors - Users lose access to items after policy or label changes ## Prerequisites - **PowerShell 7+** with `MicrosoftPowerBIMgmt` module - **Fabric Admin** or **Workspace Admin** role for diagnostic scripts - **Power BI REST API** access (interactive or service principal) - Optional: Tabular Editor for OLS/RLS inspection Install required modules: ```powershell Install-Module -Name MicrosoftPowerBIMgmt -Scope CurrentUser -Force Install-Module -Name Az.Accounts -Scope CurrentUser -Force ``` ## Quick Diagnostic Flowchart ``` User