# Audit Tenant Settings

Automatically invoke this skill whenever the user asks about Fabric tenant settings or...

- Repository: https://github.com/data-goblin/power-bi-agentic-development (1079 stars)
- Category: Engineering
- License: GPL-3.0
- Last updated: 2026-10-30
- Runs scripts: yes, review before use

## Install

Claude Code: `npx skills add data-goblin/power-bi-agentic-development --skill audit-tenant-settings -g -a claude-code -y`
Codex: `npx skills add data-goblin/power-bi-agentic-development --skill audit-tenant-settings -g -a codex -y`
Cursor: `npx skills add data-goblin/power-bi-agentic-development --skill audit-tenant-settings -g -a cursor -y`
Gemini CLI: `npx skills add data-goblin/power-bi-agentic-development --skill audit-tenant-settings -g -a gemini-cli -y`
Claude Code plugin marketplace: `/plugin marketplace add data-goblin/power-bi-agentic-development`

## Description

Automatically invoke this skill whenever the user asks about Fabric tenant settings or Power BI tenant settings or auditing tenant settings. You can use this skill if the user mentions "Fabric administration".

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# Audit Tenant Settings

Audit Fabric / Power BI tenant settings against a curated baseline, surface drift, enumerate delegated overrides at capacity / domain / workspace scope, investigate the Entra security groups those settings reference, and turn findings into a grounded discussion about what to do next. Always invoke the `fabric-cli` skill alongside this skill; it provides the `fab` CLI guidance and admin API references that this skill depends on.

## Prerequisites

This plugin is an add-on to the `fabric-cli` plugin. It requires:

- **fabric-cli plugin** installed and enabled; provides `fab` CLI guidance and admin API reference docs.
- **fab CLI** (`ms-fabric-cli`) authenticated with a Fabric / Power BI admin account.
- **az CLI** authenticated with Graph permissions (`Group.Read.All`, `User.Read.All`, `Directory.Read.All`, `RoleManagement.Read.Directory`) when investigating security groups.

## Settings

Per-project configuration via `.claude/fabric-admin.local.md`:

```markdown
---
enabled: true
tenant_label: "Contoso"
snapshot_path: "~/.cache/fabric-admin-audit/last-snapshot.json"
drift_threshold_high: 5
drift_threshold_medium: 15
notification_level: "info"
schedule: "weekly"
---

# Fabric Admin Configuration

Additional context or tenant-specific notes.
```

| Field | Type | Default | Purpose |
|---|---|---|---|
| `enabled` | bool | `true` | Toggle the plugin on/off |
| `tenant_label` | string | none | Label for PDF masthead and audit reports |
| `snapshot_path` | string | `~/.cache/fabric-admin-audit/last-snapshot.json` | Where to store/read the last-run snapshot JSON |
| `drift_threshold_high` | int | `5` | Alert when high-risk drift count exceeds this |
| `drift_threshold_medium` | int | `15` | Alert when total drift count exceeds this |
| `notification_level` | string | `info` | Verbosity: `quiet`, `info`, `verbose` |
| `schedule` | string | `weekly` | Preferred audit cadence: `daily`, `weekly`, `monthly`, `ad-hoc` |


## When to use this skill

The rest: https://github.com/data-goblin/power-bi-agentic-development/blob/HEAD/plugins/fabric-admin/skills/audit-tenant-settings/SKILL.md