Skip to main content

Power BI

Under Review

Better Auditing of User Activity (Datasets, Reports, Dashboards, Exports)

Vote (1405) Share
cbailiss's profile image

cbailiss on 02 Apr 2016 02:44:09

ALL user activities in Power BI should be logged for auditing purposes, including datasets accessed, reports/dashboards accessed, and especially data exports performed. The audit data should be accessible as a dataset to build reports against as well as easily exportable / downloadable.

Administrator on 16 Aug 2020 02:15:34

We released a US only preview for auditing Power BI. Read more about it here: https://powerbi.microsoft.com/en-us/documentation/powerbi-admin-auditing/

Comments (73)
cbailiss's profile image Profile Picture

Eric Vogelpohl on 16 Aug 2020 03:54:08

RE: Better Auditing of User Activity (Datasets, Reports, Dashboards, Exports)

Update?

cbailiss's profile image Profile Picture

Emmet on 16 Aug 2020 03:54:08

RE: Better Auditing of User Activity (Datasets, Reports, Dashboards, Exports)

Amanda Cofsky, your last post says Started on June 9th, but i read the article below released on Aug 15th which describes an update in capability of Azure Audit Logs to start capturing Power BI data.

https://powerbi.microsoft.com/en-us/documentation/powerbi-admin-auditing/

cbailiss's profile image Profile Picture

Michael Robson on 16 Aug 2020 03:54:07

RE: Better Auditing of User Activity (Datasets, Reports, Dashboards, Exports)

New documentation has just been created on this topic:
https://powerbi.microsoft.com/en-us/documentation/powerbi-admin-auditing/

cbailiss's profile image Profile Picture

Dorte on 16 Aug 2020 03:54:07

RE: Better Auditing of User Activity (Datasets, Reports, Dashboards, Exports)

PLEASE make this available to report/dashboard owners, NOT just an administrator.
BI professionals need logging of user activity desperately.

cbailiss's profile image Profile Picture

Power BI User on 16 Aug 2020 03:54:04

RE: Better Auditing of User Activity (Datasets, Reports, Dashboards, Exports)

how can I give admin rights to power bi without giving the user the global admin role?

cbailiss's profile image Profile Picture

Adam on 16 Aug 2020 03:53:56

RE: Better Auditing of User Activity (Datasets, Reports, Dashboards, Exports)

Amanda, Your explanation of what the devs are working on isn't good enough! Admins aren't the only ones that need this data. BI professionals are the ones who need it the most!

cbailiss's profile image Profile Picture

Power BI User on 16 Aug 2020 03:53:54

RE: Better Auditing of User Activity (Datasets, Reports, Dashboards, Exports)

There are massive opportunities here for PowerBI customers and systems integration consultants.
Top level scenarios:
1) Solution optimization, adoption (This is basic, and has been adequately discussed)
2) Fulfilling regulatory and policy auditability requirements
a. Correlating across Windows, IIS logs, PowerBI access to data sources (whether static Excel, SSAS, Other) as is possible with SSRS. This enables finding the specific users (and possibly filter settings, etc.) that can detail exactly what a user might have seen
b. Reporting publishing, granting, and using PowerBI reports, dashboards, data sources by user and by permissions path (say if a person has permissions via multiple Security groups and so forth) with configurable history retention.
c. Possibly a default admin dashboard that is pre-built to get folks started more quickly
3) Confirming the scope of a data breach or inappropriate sharing of information
a. Scenario: A consulting company develops a report showing sales quota by sales person. Requirement is to only to display a single row of data for a single person, but a conflicting requirement causes the report to be distributed to a group having administrative level permissions such that row level security will not be applied. After publish, a few hours pass before the error is identified. The client then needs to know which users having administrative access have viewed the report for which sales people.

cbailiss's profile image Profile Picture

David Cresp on 16 Aug 2020 03:53:51

RE: Better Auditing of User Activity (Datasets, Reports, Dashboards, Exports)

What is also needed is greater control over users access. Features such as export and show See Records should be able to be restricted at a user or user group level.

cbailiss's profile image Profile Picture

Power BI User on 16 Aug 2020 03:53:51

RE: Better Auditing of User Activity (Datasets, Reports, Dashboards, Exports)

Amanda, your June 2016 reply indicates adding this for security and compliance purposes.
These are key areas for sure, but please know that usage metrics for consumption of all types of content is extremely valuable data.
I echo the sentiment of others who mentioned making the data accessible to roles outside of O365 Admins is a key feature as well. I would argue that it should be available for viewing to anyone. In our SSRS reports, we found that exposing our Report Log usage data via linked reports was a tramendously effective way to monitor deployed report adoption and also a tramendously effective tool in assessing priority of change requests.

cbailiss's profile image Profile Picture

Power BI User on 16 Aug 2020 03:53:51

RE: Better Auditing of User Activity (Datasets, Reports, Dashboards, Exports)

I