Power BI Governance, Security and Center of Excellence (CoE)

Instructor: Alaa Hady · Language: English or Arabic · Suggested duration: 2 days · Level: Advanced (Level 300)

Objectives

• Design a pragmatic BI Operating Model (Centralized, Decentralized, or Federated CoE) that balances agility with control.
• Configure Fabric/Power BI Tenant Settings, security groups, and Microsoft Purview data loss prevention controls.
• Eliminate "report sprawl" and "shadow Excel exports" through endorsement workflows, auditing, and lifecycle management.
• Monitor tenant adoption, refresh health, and security compliance using the Admin Portal and Activity Logs.

Outline and contents

1. BI Governance frameworks: establishing a Center of Excellence (CoE), Champions network, and clear RACI ownership
2. Managing the Tenant Portal: critical Tenant Settings (export restrictions, guest access, certification permissions, Copilot switches)
3. Workspace governance: naming conventions, domain assignment, workspace creation controls, and Entra ID security group patterns
4. Data protection & compliance: Microsoft Purview Information Protection sensitivity labels, downstream inheritance to Excel/PDF, and DLP policies
5. Content lifecycle & sprawl reduction: Bronze/Silver/Gold endorsement criteria (Verified, Promoted, Certified) and retirement policies
6. Gateway governance: managing enterprise gateway clusters, data source owners, and service principals
7. Tenant observability: Admin Monitoring workspace, REST APIs, Activity Logs, and tracking actual report usage vs. shelfware
8. Licensing strategy: optimizing Power BI Pro, PPU, and Fabric F-SKU capacity allocation (see Course 30 for deep FinOps)
9. Interactive Workshop: Auditing your current tenant settings and drafting a 90-day BI Governance Charter

Target audience

BI platform owners, CoE leads, IT managers, Fabric/Power BI administrators, and information security stakeholders.

Expected outcomes

Participants leave with a tailored BI Governance Charter, a hardened tenant settings checklist, and an actionable roadmap to tame report sprawl while empowering business units safely.