Audit schema for sensitivity labels in Power BI

Whenever a sensitivity label on a semantic model, report, dashboard, or dataflow is applied, changed, or removed, that activity is recorded in the audit log for Power BI. You can track these activities in the unified audit log or in the Power BI activity log. For more information, see Track user activities in Power BI.

This article documents the information in the Power BI auditing schema that's specific to sensitivity labels. It covers the following activity keys:

  • SensitivityLabelApplied
  • SensitivityLabelChanged
  • SensitivityLabelRemoved

SensitivityLabelEventData

Field Type Must appear in the schema Description
SensitivityLabelId Edm.Guid The guid of the new label. This field is only present when the activity key is SensitivityLabelApplied or SensitivityLabelChanged.
OldSensitivityLabelId Edm.Guid The guid of the label on the item before the action. This field is only present when the activity key is SensitivityLabelChanged or SensitivityLabelRemoved.
ActionSource Edm.Enum Yes This field indicates whether the label change is the result of an automatic or manual process.
ActionSourceDetail Edm.Enum Yes This field gives more detail about what caused the action to take place.
LabelEventType Edm.Enum Yes This field indicates whether the action resulted in a more restrictive label, less restrictive label, or a label of the same degree of sensitivity.

ArtifactType

This field indicates the type of item the label change took place on.

Value Field
1 Dashboard
2 Report
3 Semantic model
7 Dataflow

ActionSource

This field indicates whether the label change is the result of an automatic or manual process.

Value Meaning Description
2 Auto An automatic process performed the action.
3 Manual A manual process performed the action.

ActionSourceDetail

This field gives more detail about what caused the action to take place.

Value Meaning Description
0 None There are no other details.
3 AutoByInheritance The label change took place as a result of an automatically triggered inheritance process.
4 AutoByDeploymentPipeline The label change took place automatically as a result of the deployment pipeline process.
5 PublicAPI The label change action was performed by one of the following Power BI public admin REST APIs: setLabels, removeLabels.

LabelEventType

This field indicates whether the action resulted in a more restrictive label, less restrictive label, or a label of the same degree of sensitivity.

Value Meaning Description
1 LabelUpgraded A more restrictive label was applied to the item.
2 LabelDowngraded A less restrictive label was applied to the item.
3 LabelRemoved The label was removed from the item.
4 LabelChangedSameOrder The label was replaced by another label with the same level of sensitivity.