Understand the classic sensitivity labels report in Unified Catalog

This article describes how to access, view, and filter security insights provided by sensitivity labels applied to your data.

Supported data sources include: Azure Blob Storage, Azure Data Lake Storage (ADLS) GEN 1, Azure Data Lake Storage (ADLS) GEN 2, SQL Server, Azure SQL Database, Azure SQL Managed Instance, Amazon S3 buckets, Amazon RDS databases (public preview), Power BI.

In this article, you learn how to:

Prerequisites

Before getting started with Data Estate Insights, make sure that you complete the following steps:

• Set up your Azure resources and populate the relevant accounts with test data.
• Extended sensitivity labels to assets in Microsoft Purview Data Map, and create or select the labels you want to apply to your data.
• Set up and complete a scan on the test data in each data source. For more information, see Manage data sources in Microsoft Purview and Create a scan rule set.
• Permissions depending on your current experience:
  • If using the classic Microsoft Purview Catalog, you need the data curator role or insight reader role.
  • If using the new Microsoft Purview Unified Catalog, you need data health reader permissions.

For more information, see Manage data sources in Microsoft Purview and Automatically label your data in Microsoft Purview.

Use Data Estate Insights for sensitivity labels

Classifications are similar to subject tags. Use them to mark and identify data of a specific type that you find within your data estate during scanning.

Sensitivity labels enable you to state how sensitive certain data is in your organization. For example, a specific project name might be highly confidential within your organization, while that same term isn't confidential to other organizations.

Classifications match directly, such as a social security number, which has a classification of Social Security Number.

In contrast, sensitivity labels are applied when one or more classifications and conditions are found together. In this context, conditions refer to all the parameters that you can define for unstructured data, such as proximity to another classification, and % confidence.

Data Estate Insights uses the same classifications, also known as sensitive information types, as those used with Microsoft 365 apps and services. This enables you to extend your existing sensitivity labels to assets in Data Map.

View sensitivity labeling insights

1. Open the Microsoft Purview portal.

2. If you're using the classic Microsoft Purview portal, select Data estate insights. If you're using the new Microsoft Purview portal open Unified Catalog, select Health Management, then select Reports.

3. Select the Classic sensitivity labels report.

   Note

   If this report is empty, you might not have extended your sensitivity labels to Data Map. For more information, see Learn about sensitivity labels in Data Map.

   

   The main Sensitivity labeling insights page displays the following areas:

   Area	Description
   Overview of sources with sensitivity labels	Displays tiles that provide: - The number of subscriptions found in your data. - The number of unique sensitivity labels applied on your data - The number of sources with sensitivity labels applied - The number of files and tables found with sensitivity labels applied
   Top sources with labeled data (last 30 days)	Shows the trend, over the past 30 days, of the number of sources with sensitivity labels applied.
   Top labels applied across sources	Shows the top labels applied across all of your Microsoft Purview data resources.
   Top labels applied on files	Shows the top sensitivity labels applied to files in your data.
   Top labels applied on tables	Shows the top sensitivity labels applied to database tables in your data.
   Labeling activity	Displays separate graphs for files and tables, each showing the number of files or tables labeled over the selected time frame. Default: 30 days Select the Time filter above the graphs to select a different time frame to display.

Sensitivity labeling insights drilldown

In any of the following Sensitivity labeling insights graphs, select the View more link to drill down for more details:

• Top labels applied across sources
• Top labels applied on files
• Top labels applied on tables
• Labeling activity > Labeled data

For example:

To learn more, use the following options:

Sensitivity label integration with Microsoft Purview Information Protection

Close integration with Microsoft Purview Information Protection means that you have direct ways to extend visibility into your data estate, and classify and label your data. For more information about sensitivity labels, see: Learn about sensitivity labels.

To extend sensitivity labels to your assets in Data Map, you must turn on this capability in the Microsoft Purview portal.

For more information, see Apply sensitivity labels to your data in Data Map.

Next steps

Learn how to use Data Estate Insights with sources below:

• Learn how to use Asset insights.
• Learn how to use Data Stewardship.
• Learn how to use Classification insights.
• Learn how to use Glossary insights.