Audit Tenant Settings

Audit Fabric / Power BI tenant settings against a curated baseline, surface drift, enumerate delegated overrides at capacity / domain / workspace scope, investigate the Entra security groups those settings reference, and turn findings into a grounded discussion about what to do next. Always invoke the fabric-cli skill alongside this skill; it provides the fab CLI guidance and admin API references that this skill depends on.

Prerequisites

This plugin is an add-on to the fabric-cli plugin. It requires:

• fabric-cli plugin installed and enabled; provides fab CLI guidance and admin API reference docs.
• fab CLI (ms-fabric-cli) authenticated with a Fabric / Power BI admin account.
• az CLI authenticated with Graph permissions (Group.Read.All, User.Read.All, Directory.Read.All, RoleManagement.Read.Directory) when investigating security groups.

Settings

Per-project configuration via .claude/fabric-admin.local.md:

---
enabled: true
tenant_label: "Contoso"
snapshot_path: "~/.cache/fabric-admin-audit/last-snapshot.json"
drift_threshold_high: 5
drift_threshold_medium: 15
notification_level: "info"
schedule: "weekly"
---

# Fabric Admin Configuration

Additional context or tenant-specific notes.

Field	Type	Default	Purpose
enabled	bool	true	Toggle the plugin on/off
tenant_label	string	none	Label for PDF masthead and audit reports
snapshot_path	string	~/.cache/fabric-admin-audit/last-snapshot.json	Where to store/read the last-run snapshot JSON
drift_threshold_high	int	5	Alert when high-risk drift count exceeds this
drift_threshold_medium	int	15	Alert when total drift count exceeds this
notification_level	string	info	Verbosity: quiet, info, verbose
schedule	string	weekly	Preferred audit cadence: daily, weekly, monthly, ad-hoc

When to use this skill