powerbi-audit-tenant-settingslisted
Install: claude install-skill santoshkanthety/powerbi-agent
# Audit Tenant Settings
Audit Fabric / Power BI tenant settings against a curated baseline, surface drift, enumerate delegated overrides at capacity / domain / workspace scope, investigate the Entra security groups those settings reference, and turn findings into a grounded discussion about what to do next. Always invoke the `fabric-cli` skill alongside this skill; it provides the `fab` CLI guidance, admin API references, and the `microsoft-learn` MCP server that this skill depends on.
## Prerequisites
This plugin is an add-on to the `fabric-cli` plugin. It requires:
- **fabric-cli plugin** installed and enabled; provides `fab` CLI guidance, the `microsoft-learn` MCP server, and admin API reference docs.
- **fab CLI** (`ms-fabric-cli`) authenticated with a Fabric / Power BI admin account.
- **az CLI** authenticated with Graph permissions (`Group.Read.All`, `User.Read.All`, `Directory.Read.All`, `RoleManagement.Read.Directory`) when investigating security groups.
## Settings
Per-project configuration via `.claude/fabric-admin.local.md`:
```markdown
---
enabled: true
tenant_label: "Contoso"
snapshot_path: "~/.cache/fabric-admin-audit/last-snapshot.json"
drift_threshold_high: 5
drift_threshold_medium: 15
notification_level: "info"
schedule: "weekly"
---
# Fabric Admin Configuration
Additional context or tenant-specific notes.
```
| Field | Type | Default | Purpose |
|---|---|---|---|
| `enabled` | bool | `true` | Toggle the plugin on/off |
| `tenant_label` | string | n