dtwo Policy Store

Policies tagged "power-bi"

power-bi · ingress

Block Power BI RLS-Bypass Service-Principal Queries

On Microsoft's remote Power BI MCP server (https://api.fabric.microsoft.

power-birole-gate-writesrlsservice-principalingresssoc2

power-bi · ingress

Default-Deny Unknown Power BI Modeling Tools

Pins a per-tenant allowlist of audited Power BI tool-name suffixes and denies any call whose tool name does not end with an allowlisted entry.

power-bidefault-deny-unknown-toolsallowlistmodelingingresssoc2

power-bi · ingress

Freeze Power BI RLS Role Edits

Freezes edits to row-level-security (RLS) roles on the Power BI MCP surface.

power-bifreeze-identity-planeingressrlsidentitygroupssoc2iso27001-nist

power-bi · ingress

Guard DAX Whole-Table Dumps in Power BI

Power BI semantic models front the warehouse: a model imports or DirectQueries lakehouse/warehouse tables — finance, HR, customer PII.

power-biguard-warehouse-sqlingressdaxexfiltrationsoc2gdpr-ccpa

power-bi · egress

Power BI: Redact PII in Query Results

Scans the content returned by Power BI's result-returning tools and rewrites high-confidence PII shapes to fixed, non-recoverable redaction tokens before the…

power-biredact-piipiidlpdaxredactionegresssoc2gdpr-ccpa