Governance & Access Control · Power BI and Microsoft Fabric
Govern your
Power BI estate
without fear
Power BI Sentinel gives governance and IT teams complete visibility over who has access, what’s changing, and whether your data practices are audit-ready, without slowing the business down.
1,247
Reports
84
Workspaces
312
Users
Governance Health
Scanning estate…
Permission audit
—
Data lineage
—
Risks identified
—
Compliance readiness
—
2
independent certifications: ISO 27001:2022 and Cyber Essentials
360°
visibility across access, lineage, usage, and the full change history
Every tier
change tracking with full who / what / when attribution included, no upsell
The problem
Where governance breaks down
Access & permissions
“Who has access to our sensitive financial data, and who’s actually been using it?”
As self-service BI grows, access permissions accumulate without oversight. Power BI Sentinel maps every user’s access centrally and maintains a full, exportable audit history, so you always know who can see what, and when they looked.
Power BI Sentinel gives you
Centralised permission visibility across every workspace
Exportable access history on demand
Clear identification of over-privileged users
Compliance & audit evidence
“How do we prove compliance without a two-week audit scramble?”
Evidence gathering is manual, fragmented, and stressful under pressure. Power BI Sentinel keeps a timestamped history of every access and configuration change, ready to export the moment an auditor asks, backing your own ISO 27001 and Cyber Essentials programme.
Power BI Sentinel gives you
Full change history with who / what / when attribution, at every tier
Historic permission snapshots, exportable on demand, on the Discovery tier
Continuous evidence, not just a point-in-time snapshot
Data lineage & change impact
“What breaks downstream if we change this data source?”
Teams make changes without understanding the full blast radius. Power BI Sentinel’s lineage maps every dependency from report visuals down to source tables, including gateway sources, refresh schedules, and M Code/SQL parsing, so you can assess impact before anything breaks.
Power BI Sentinel gives you
End-to-end lineage down to source-table depth
Impact visibility before any source or model change
Fewer unplanned outages, faster recovery when things break
See these problems solved in your own estate.
Book a product demo
Use cases
Six ways organisations use it
Power BI Sentinel’s governance capabilities are built around the real challenges teams face as their Power BI estate scales across the business.
01 Scaling Self-Service BI
Grow adoption without losing control
“We’ve enabled self-service BI, but governance visibility hasn’t kept pace with adoption.”
Safer self-service adoption across departments
Improved oversight as the estate grows
Reduced compliance risk at every level
02 Sensitive Data Access
Manage access to critical business data
“Finance, HR, and customer data is accessible to too many people and we have no easy way to review it.”
Reduced data exposure and access sprawl
Stronger security controls across workspaces
Improved audit readiness for sensitive datasets
03 Data Trustworthiness
Build confidence in the numbers
“Executives question whether data in reports can be trusted before making strategic decisions.”
Greater trust in reporting data and lineage
Improved decision confidence at leadership level
Fewer errors traced to unknown upstream changes
04 Business Continuity
Recover quickly when things go wrong
“Unexpected deletions and source changes have broken business-critical reports with no fast path to recovery.”
Reduced operational disruption from changes
Faster issue identification and resolution
Lower recovery risk with automated backup
05 Investment Visibility
Maximise your Power BI licence value
“We’re paying for licences across the organisation but have no idea which reports are actually being used.”
Better licence utilisation and cost efficiency
Identification and cleanup of redundant content
Informed decisions on Power BI investment
06 Governance & Compliance
Meet compliance requirements at scale
“Demonstrating audit-ready governance is becoming harder as the estate grows.”
Improved audit readiness across the estate
Simplified evidence-gathering and reporting
Better historical tracking and change records
Ready to see it work for your organisation?
Book a product demo
Permission right-sizing
Recommends the downgrade. You make the call.
Power BI Sentinel compares what each person and group can actually do against the role they’ve been assigned, then recommends the least-privilege fit.
- Detects over-permissioned users and groups across every workspace
- Recommends the least-privilege role, one user or a whole workspace at a time
- Covers individual users, Entra groups, and service accounts alike
- Recommendations only: you action every change in Power BI, and Power BI Sentinel logs it automatically
J. Marsh
Finance Reporting
Admin
→
Contributor
No admin actions logged in the last 90 days
All Employees (group)
Sales Ops
Contributor
→
Viewer
Group only ever opens reports, never edits
svc-powerautomate
Exec Dashboards
Member
→
Viewer
Service account only reads data, never modifies it
Published to the web
High
Flags semantic models and reports made public via Power BI’s Publish to Web.
Widely-shared artefacts
Medium
Flags reports and dashboards shared org-wide or to unusually large groups.
Row-level security gaps
High
Flags semantic models with missing, partial, or untested RLS roles.
Entra group sprawl
Medium
Expands a group grant to show the real headcount and membership behind it.
Exposure radar
Know what’s exposed, before it’s a problem
Power BI Sentinel continuously scans your tenant for the access patterns that turn into incidents, and puts them in front of the right person first.
- Detects reports and models published live to the public web
- Flags artefacts shared org-wide or to unusually large groups
- Surfaces semantic models with missing or partial RLS coverage
- Detection only: remediation, unpublishing a link, tightening sharing, fixing RLS, happens in Power BI
How it works
Three steps, continuous governance
1
Connect & scan
Connect via Service Principal or SSO using a user token. Power BI Sentinel then scans your entire Power BI and Microsoft Fabric estate, all workspaces, reports, semantic models, and data source connections.
2
Analyse & act
Over-permissioned users, lineage gaps, and access risks are identified automatically and surfaced as prioritised, actionable recommendations.
3
Govern & report
Teams gain continuous estate-wide visibility. Change history, permission snapshots, and audit evidence are available on demand, at any time.
See the three steps in a live walkthrough.
Book a product demo
Compliance & audit evidence
Audit evidence, always on hand
Power BI Sentinel is independently certified, and keeps the timestamped history you need to answer an auditor’s questions without a scramble.
Independently certified
ISO 27001:2022
Information security management
Cyber Essentials
UK government-backed security certification
What you can export, on demand
Full change history for every report, permission, tenant setting, and workspace, with who / what / when attribution, at every tier
Historic permission snapshots that reconstruct exactly who could access what, at any point in time, on the Discovery tier
Data stays in your own Azure tenant, in a database you control, never through our servers
Talk through your compliance requirements in a live demo.
Book a product demo
Get started
Ready to govern your
Power BI estate with confidence?
Book a personalised, 45-minute walkthrough with our team. No commitment required.
ISO 27001 certified
Cyber Essentials certified
Microsoft SSO & MFA
Your data stays yours