Information Oversharing v2 Template with Microsoft Fabric

1. Security Scenario

One of the most common scenarios for Microsoft Graph Data Connect (MGDC) for SharePoint is Information Oversharing. This security scenario focuses on identifying which items are being widely shared within the tenant and understanding how permissions are applied at each level.

The MGDC datasets for this scenario are SharePoint Sites and SharePoint Permissions. If you’re not familiar with these datasets, you can find details in the schema definitions at https://aka.ms/SharePointDatasets. 

To assist you in using these datasets, the team has developed an Information Oversharing Template. Initially published as a template for Azure Synapse, we now have a new Microsoft Fabric template that is simpler and offers more features.

The SharePoint Information Oversharing v2 template, based on Microsoft Fabric, is now publicly available.

2. Instructions

The template comes with a set of detailed instructions at https://aka.ms/fabricoversharingtemplatesteps. These instructions include: 

• How to install the Microsoft Fabric and Microsoft Graph Data Connect prerequisites 

• How to import the pipeline template from the Microsoft Fabric gallery and set it up 

• How to import the Power BI template and configure the data source settings  

See below some additional details about the template.

3. Microsoft Fabric Pipeline

After you import the pipeline template, it will look like this: 

Pipeline in Microsoft Fabric

The Information Oversharing template for Microsoft Fabric includes a few key improvements: 

• It uses the new UserCount and TotalUserCount properties in the SharePoint Permissions dataset, which means you do not need to pull the SharePoint Groups or the three Microsoft Entra ID Group datasets to calculate the number of users being granted access. This optimization will greatly reduce the cost to get a report of the sites shared with the most users. 

• The new template also uses delta datasets to update the SharePoint Sites and SharePoint Permissions datasets. It keeps track of the last time the datasets were pulled by this pipeline, requesting just what changed since then. 
  
• As the previous template, this one also flattens the SharePoint Permissions dataset, creating one permission row for each "Shared With" inside the permission. So, if a file is shared with three people, the SharePoint dataset will show one row, but the flattened data stored in Microsoft Fabric will show three rows.

You can find details on how to find and deploy the Microsoft Fabric template in the instructions (see item 3).

4. Microsoft Fabric Report

The typical result from this solution is a set of Power BI dashboards pulled from the Microsoft Fabric data source. Here is an example: 

Power BI Sample Dashboard

These dashboards serve as examples or starting points and can be modified as necessary for various visualizations of the data within these datasets.

The instructions (see item 3) include details on how to find and deploy a few sample Power BI Information Oversharing templates. 

5. Conclusion

I hope this provides a good overview of the Information Oversharing template for Microsoft Fabric. You can read more about the Microsoft Graph Data Connect for SharePoint at https://aka.ms/SharePointData. There you will find many details, including a list of datasets available, other common scenarios and frequently asked questions.