Governance¶
The Governance dashboard scores how well your Power BI estate is labelled, endorsed, connected and owned, and shows the Fabric item estate and app coverage.
Open it with Select Analysis > Governance. Labels, endorsement, schema drift, lineage, ownership, Fabric estate and app coverage show the current state. The date filter applies only to the endorsed-but-stale view check. Dashboards are environment-wide because they have no capacity link.
Image of the Governance dashboard: five KPI cards including Governance Score, Sensitivity Label Distribution and Endorsement & Certified-but-Stale panels
../images/dashboards/governance.png
Before you begin¶
- Sensitivity labels, endorsement and schema flags come from the workspace scan. Microsoft returns them only when the admin API tenant settings for detailed metadata are on. See Tenant Settings.
- Owner status (absent, disabled) comes from the Microsoft Graph user collectors. See API Permissions.
KPI cards¶
| Card | What it shows |
|---|---|
| Datasets Labeled | Semantic models with a sensitivity label, of all scoped models |
| Unlabeled Shared Externally | Unlabeled models with a guest grant |
| Schema Drift | Models Power BI flags as "schema may not be up to date", plus models whose schema could not be read ("read errors") |
| Governance Score | Composite 0-100 score (below) |
| Dashboards Labeled | Dashboards with a sensitivity label |
Governance Score¶
The score starts at 100 and subtracts weighted penalties. Higher is better.
| Component | Weight | Penalty |
|---|---|---|
| Sensitivity labels | 35 | Share of scoped models without a label |
| Endorsement | 15 | Shortfall against a target of 5 percent of models Certified or Promoted |
| Schema drift | 25 | Share of models flagged for schema drift |
| Lineage | 25 | Share of models in a broken-lineage class, capped at 20 percent |
The Executive page reuses the same inputs. See Executive.
Panels¶
| Panel | What it shows | Click |
|---|---|---|
| Sensitivity Label Distribution | Models per sensitivity label, with Unlabeled as its own slice. Label IDs are shown shortened, because the tenant's label names are not collected. | A label opens Sensitivity Label Datasets; Unlabeled opens Unlabeled Datasets |
| Endorsement & Certified-but-Stale | Endorsed Models Stale: Certified or Promoted models whose reports had zero views in the window, and a table Endorsement, Models, Stale, Share. The view check is environment-wide: a model is stale only if nobody viewed it. | Endorsed But Stale; a row opens the stale models of that endorsement |
| Lineage Integrity | Broken parent-child links in non-overlapping classes: Class, Count, Severity (classes below) | A class opens Report Lineage Class or Dataset Lineage Class |
| Ownership Concentration | Top owners of scoped models (key-person risk). Absent Owner: models whose owner is not in the directory. Disabled Owner: models owned by a disabled account. Both are labelled "no steward". | An owner opens Models By Owner |
| Fabric Estate | Fabric items by type and per capacity, with the count of non-active items. "(no capacity)" means the item has no resolvable capacity. | - |
| Dataflow Hygiene | Dataflows with their datasource links, Orphaned (no downstream datasource usage) and Misconfigured ("fix links") | - |
| App Publication Coverage | App Coverage: workspaces that publish an app, of all scoped workspaces, and the number of apps. Low coverage is common and informational. | - |
Lineage classes¶
| Class | Severity colour | Note |
|---|---|---|
| PBI reports with no dataset | red | |
| Reports with dangling dataset ref | red | |
| Datasets with no datasource | amber | |
| Datasets with no downstream report | amber | |
| Datasources used by nothing | amber | Environment-wide: orphans have no capacity path |
| Content on no dedicated capacity | grey | A cost and consolidation signal, not an integrity defect |
| Paginated reports (no dataset expected) | grey | Expected: paginated reports carry no dataset |
Questions this page answers¶
- How much of the estate carries a sensitivity label, and is unlabeled content shared with guests?
- Are endorsed (Certified, Promoted) models still used?
- Which reports and datasets have broken lineage?
- Who owns the models, and which ones have no active owner?
- Which Fabric item types exist where, and which workspaces publish apps?