Question

Your organization requires that all data assets containing personally identifiable information (PII) carry a 'Highly Confidential' classification that automatically flows to any downstream artifacts and enforces encryption rights when data is exported to Excel or PDF. A data analyst has built a semantic model on top of a lakehouse table containing customer PII. Which action should you take to meet the requirement with the least ongoing manual effort?

Accepted Answer

Apply a Microsoft Purview Information Protection sensitivity label named 'Highly Confidential' to the semantic model so that it propagates to downstream reports and enforces the label's protection settings on exports.

Answer

Enable row-level security (RLS) roles on the semantic model to restrict which users can view the PII columns.

Answer

Endorse the semantic model as 'Certified' so consumers know it contains sensitive data.

Answer

Configure object-level security (OLS) to hide the PII columns from all report consumers.