Announcing the Enhanced Tenant Setting Delegation for Export Controls in Microsoft Fabric
Introduction:
We are excited to announce a significant enhancement to the Tenant Setting Delegation feature in Microsoft Fabric. Tenant setting delegation has existed in some form since the public preview launch of Fabric, primarily allowing delegation of workload controls to capacity admins. We are now introducing the delegation of export settings to workspaces via domain. This new capability provides more granular control over data export permissions, addressing the specific needs of tenant, domain and workspace administrators.
Current Landscape and Challenges:
Previously, tenant administrators were responsible for managing a wide range of settings across the entire tenant, including data export permissions. This centralized approach often led to challenges in efficiently managing these settings and ensuring that permissions were appropriately tailored to the needs of different teams. Workspace administrators, on the other hand, struggled with a lack of control over their specific environments, making it difficult to manage data export settings effectively.
Introducing Enhanced Tenant Setting Delegation:
The new Tenant Setting Delegation feature allows export settings to be delegated to the workspace level.
This improvement provides several benefits:
- Enhanced Security: Restrict data export capabilities to specific workspaces, minimizing the risk of unauthorized data access.
- Improved Management: Empower workspace administrators to manage their own settings without impacting other parts of the organization.
- Flexibility: Customize data export settings based on the sensitivity and requirements of each workspace.
- Reduced Admin Burden: Distribute the management responsibilities, alleviating the load on tenant and domain administrators.
Delegation of Export Control Settings:
With the new enhancement, domain and workspace administrators can manage the following export control settings when delegated by tenant admins:
- Export to Excel
- Export to CSV
- Export PPT and PDF documents
- Export to MHTML
- Export to Word
- Export to XML
- Export reports as image
How It Works:
Here’s a brief overview of how you can leverage this enhanced Tenant Setting Delegation feature.
- Access Tenant Settings: Log in to the Fabric admin portal and navigate to the ‘Tenant settings’ section. Find the settings of interest to be delegated.
- Enable Delegation: Turn on the ‘Domain admins can enable/disable’ and ‘Workspace admins can enable/disable’ options for the desired export settings.
- Override Settings at the Domain Level: Locate the delegated tenant setting from the tab named ‘Delegated Settings > Export and sharing’ under domain settings page. Override the setting On/Off value and security groups configurations if needs to different from what was inherited from the tenant level. These changes are only applicable to the workspaces attached to the domain where the changes are made.
- Delegate to Workspaces from Domain: Turn on the ‘Workspace admins can enable/disable’ option for the desired export settings from the ‘Delegated Settings > Export and sharing’ tab under domain settings.
- Turn ON or OFF Export Settings at Workspace Level: Locate the desired export setting from the ‘Delegated Settings’ tab in the ‘Workspace settings’ page. Turn On or Off the setting as required for the proper administration of the workspace.
Benefits:
Using the enhanced Tenant Setting Delegation, organizations can now manage export settings more effectively. This feature allows different teams to accept the risks associated with exporting data within their own workspaces without needing enterprise-wide signoff. It also provides tenant administrators with much-needed relief by distributing management responsibilities and giving workspace admins the controls they need to operate efficiently. In short, delegation of settings enables us to maintain centralized security while providing decentralized flexibility.
Conclusion:
We hope the enhanced Tenant Setting Delegation feature will greatly enhance your experience in administering Microsoft Fabric. It brings a new level of control, flexibility, and efficiency to managing tenant settings, addressing key pain points for both tenant and workspace administrators. We look forward to hearing your feedback and seeing how this feature helps streamline your operations. Please continue to send us feedback for what new capabilities you’d like to see in the future.
