Microsoft Fabric: Upcoming tenant settings for OneLake diagnostic logs

Microsoft Fabric will introduce a tenant setting on October 28, 2025, allowing admins to control inclusion of user identifiers in OneLake diagnostic logs. By default, End User Identifiable Information is logged, but admins can opt out for privacy and compliance. This supports security, troubleshooting, and usage analytics. To support enhanced monitoring and governance, Microsoft Fabric is introducing a new tenant setting that allows admins to control whether user identifiers are included in OneLake diagnostic logs. This change aligns with customer feedback around privacy and compliance, giving organizations more flexibility in managing diagnostic data. When this will happen: OneLake diagnostics will become generally available in mid-October 2025. The new tenant admin setting will be available starting October 28, 2025. How this affects your organization: Who is affected: Admins managing Microsoft Fabric and OneLake environments. Workspace Admins and Tenant Admins. What will happen: Workspace Admins will be able to enable OneLake diagnostics to monitor data interactions: View image in new tab By default, diagnostic events will include End User Identifiable Information (EUII), such as User Principal Name (UPN) and IP address. A new tenant admin setting will be available to opt out of logging EUII. The setting will be enabled by default—EUII will be logged unless the toggle is disabled. Example scenarios supported by OneLake diagnostics: Security investigation: Track which users accessed sensitive datasets, when, and from where. Helps identify unauthorized access attempts or unusual patterns. Performance troubleshooting: Diagnose latency or failure issues by correlating diagnostic events with user actions or system interactions. Usage analytics and optimization: Understand which datasets are most frequently accessed, by whom, and how often. Supports data governance and resource optimization. Integration monitoring: Monitor external systems interacting with OneLake (via APIs or connectors), ensuring integrations are functioning as expected and diagnosing issues when they arise. What you can do to prepare: Review your organization’s privacy and compliance policies. Starting mid-October: Workspace Admins can enable OneLake diagnostics (EUII will be redacted at this stage). By October 28: Tenant Admins should review the new admin toggle in the Fabric Admin Portal. If you wish to prevent EUII from being logged: […]

The post Microsoft Fabric: Upcoming tenant settings for OneLake diagnostic logs appeared first on M365 Admin.