Microsoft Purview | Data Security Posture Management for AI Fabric integration in data risk assessment

Introduction To help organizations understand and reduce data oversharing risks in Microsoft Fabric, Purview DSPM's (preview) Data Risk Assessment now scans all Fabric workspaces for key oversharing insights like sensitivity label and access activity. This update enables admins to identify potentially overshared Fabric artifacts—such as dashboards and reports—and take proactive steps to secure sensitive data across Fabric and Power BI workloads. This message is associated with Microsoft 365 Roadmap ID 553217. When this will happen: General Availability (Worldwide): We will begin rolling out in mid-April 2026 and expect to complete by early May 2026. How this affects your organization: Who is affected: Microsoft 365 tenants using Microsoft Purview Data Security Posture Management (preview) Organizations with Microsoft Fabric workspaces Purview admins, Global admins, and Fabric admins What will happen: A new Fabric tab will appear at the top of DSPM Data Risk Assessments. Admins can view default oversharing assessment results for Fabric artifacts (for example, dashboards and reports). Admins can take protective actions to secure sensitive Fabric data. Oversharing insights for Fabric data are centralized within the new Fabric tab. A one‑time setup is required to allow Purview to scan Fabric workspaces. This feature is not enabled automatically; admin action is required to start scanning. What you can do to prepare: Coordinate with your Fabric admin and Global admin to enable the Fabric Oversharing Assessment in Microsoft Purview. This involves setting up an Entra Application as a service principal.  Update internal security and governance documentation to reflect the new Fabric oversharing insights. Share this change with security and analytics stakeholders who manage Fabric data. Learn more: Prevent oversharing with data risk assessments from Microsoft Purview Data Security Posture Management | Microsoft Learn Compliance considerations: No compliance considerations identified, review as appropriate for your organization.