Only this pageAll pages
Powered by GitBook
Couldn't generate the PDF for 104 pages, generation stopped at 100.
Extend with 50 more pages.
1 of 100

Datalogz Docs

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Organizational Setup

This section explains how to set up Datalogz Control Tower for your organization: connect your analytics platforms, invite your people, and scope what each group manages. For who does what during setup, see the Getting Started guide.

1. Create a connector

A connector links Control Tower to one of your analytics platforms. Set up one connector for each platform your organization uses. Control Tower supports Power BI, Tableau, Qlik Sense, Sigma, Spotfire, Databricks, and SharePoint. Once connected, Control Tower automatically ingests your analytics metadata and activates default monitors. No further configuration is needed to start seeing results.

2. Invite members

Invite the people who need access to Control Tower. What each member can see and manage is determined by the user groups and teams they belong to and the roles they hold.

3. Set up teams

Teams scope a subset of your analytics estate, such as your production Power BI workspaces or a set of Tableau projects. Scoping by team lets each group track the health of the content it owns, without noise from the rest of the estate.

4. Add members to teams

Add your invited members to the relevant teams. This gives them access to the assets, monitors, and alerts they are responsible for.

Users and User Groups

In Users and User Groups you manage who can sign in to Datalogz Control Tower and what they are allowed to do.

Users are the individuals with access. Each user holds a role that defines what they can view, edit, or configure.

User groups bundle permissions: assign a role to a group once and every member inherits it. This keeps permissions consistent and saves you from managing roles user by user.

Recommended approach:

  1. Create user groups that mirror your teams or departments (for example, Finance Analysts or Marketing Ops).

  2. Assign the appropriate role to each group.

  3. Invite users and add them to their groups. You can wait until your Teams setup is finished before inviting users.

To invite someone, go to Settings > Users, click Invite Users, and assign their role, groups, and teams. Invitations are sent by email.

Entra ID

Microsoft Entra ID, formerly Azure Active Directory, is Microsoft's cloud identity and access management service. Connect it to Datalogz Control Tower and Datalogz maps the users in your inventory to the departments listed in Entra ID. You will see this department information throughout the inventory and in BI360.

Prerequisites

  • You have a Service Principal with (read-only) access to Entra ID.

How to connect to Entra ID

  1. Go to Settings > User Directory.

  2. In the Entra ID card, click Set up directory.

  3. Fill out the tenant, client ID and client secret.

  1. Click Connect.

Teams

Teams scope Control Tower to a subset of your BI estate. A team is linked to a single BI connector and covers the platform contexts you select, such as your production Power BI workspaces or a set of Tableau projects. Each team gets its own monitors, inventory, and insights; for Power BI teams, BI Similarity (preview) is also available.

Group people into teams by domain (for example Finance or Marketing), by collaboration, or by access level (for example Executives or Global Admins). Team members see and manage the content their team owns.

Access Control.

Users and Groups can be added to a team so they can view and interact with that team’s monitors, alerts, and assets. Users with the BI Viewer and BI Admin roles can access all the teams as a member or admin, respectively.

Sigma

This guide sets up the Sigma connector using OAuth client credentials (Client ID and Client Secret), Sigma's recommended method for application-level access to the Sigma REST API. Datalogz reads metadata only; it never accesses the data inside your workbooks.

You will complete four steps: confirm Admin access and API availability, identify your API base URL, generate client credentials, and create the connector in Datalogz Control Tower.

  1. You must be a member of the Admin account type in Sigma to generate API client credentials.

  2. Your Sigma plan must include API access. If you are unsure, ask your Sigma account team to confirm the API is enabled for your organization.

Sigma hosts customers across multiple clouds and regions, and the correct API base URL depends on where your organization is provisioned.

Qlik Sense

Applies to: Qlik Sense Enterprise on Windows

This guide sets up the Qlik Sense connector using virtual proxy with header authentication, a Qlik method that is straightforward to configure between trusted systems. Datalogz reads metadata only; it never accesses the data inside your apps.

You will complete two steps: create a virtual proxy in the Qlik Management Console, and create the connector in Datalogz Control Tower. NPrinting monitoring is an optional third step.

  1. In the QMC, create a virtual proxy with header authentication. See Qlik's virtual proxy documentation for the detailed steps.

  2. Note the following values; you will need them in Step 2:

SharePoint

This guide sets up the SharePoint connector, which inventories your SharePoint sites, document libraries, and Excel workbooks through the Microsoft Graph API. Datalogz reads metadata only; it never accesses the data inside your files.

There are two ways to authenticate. App mode (recommended) uses an application registration with client credentials. User mode signs in as a user via Microsoft's device-code flow.

  1. in the Microsoft Entra portal. Note the Application (client) ID and Directory (tenant) ID.

  2. Under API permissions, add the Microsoft Graph application permissions Sites.Read.All and Files.Read.All, and grant admin consent.

Asset Mapping

Asset mapping connects your BI assets to your organization's taxonomy: functions, sectors, business units, departments, or any other logical grouping. Once mapped, those groups power the BI360 widgets and the inventory, so health, usage, and cost roll up by the part of the business that owns the content.

Asset mapping is set up per BI platform: each connector gets its own mapping connection, such as Power BI Asset Mapping or Tableau Asset Mapping. For each one, you upload a CSV or XLSX file that maps that platform's assets (for example Tableau workbooks, views, and data sources) to your taxonomy, and choose the level to aggregate by, such as department. Each card shows the file in use, what it aggregates by, and the latest sync status.

  1. Go to Settings > User Directory.

  2. Open the Asset Mapping card for your platform and upload your mapping file (CSV or XLSX).

User Onboarding Guide

New to Datalogz Control Tower? This guide gets your organization productive in the first 15 minutes.

Your Datalogz team completes onboarding with you first. During that process they set up your log-in method, configure connectors to your BI environment, and help you select and enable the monitors you want running. If any of these are incomplete, contact your Datalogz team before proceeding.

Configuration happens in Settings, organized into three groups in the left navigation:

  • Organization: people and how they are grouped for access and ownership.

  • Connectors: links to your BI platforms and identity provider.

Available Roles

Datalogz uses two kinds of roles.

  • Account roles apply across your whole account. They control who can manage users, connectors, settings, and shared catalogs.

  • Team roles apply within a single team. They control who can see a team's data and who can configure the team.

A user can hold several account roles at once, either assigned directly or through a group. Their permissions add up. Team roles work the same way: if a user belongs to a team directly and through a group, they get the higher of the two roles.

Datalogz User The standard role for everyone in the account. A Datalogz User can sign in and access basic features. Everything else comes from the teams they're assigned to.

BI Viewer Read-only access to every team's data, plus account-wide BI360 definitions and analytics. BI Viewers cannot change team configuration. This role suits analysts and leaders who need to see everything without administering anything.

Create, View or Delete a Team

This page covers creating, viewing, and deleting teams. Each team is linked to a single BI connector and has its own monitors, inventory, and insights.

  • Root Users can create and split teams. They can also invite members.

  • Admins can create new teams and invite members.

  • All users can belong to one or more teams.

Follow these steps to create a team and add users to it.

Log in to Sigma and go to Administration > Developer Access.

  • Copy the API base URL.

  • Common examples:

    • AWS US (West): https://aws-api.sigmacomputing.com

    • AWS US (East): https://api.us-a.aws.sigmacomputing.com

    • GCP: https://api.sigmacomputing.com

    • Azure: https://api.us-a.azure.sigmacomputing.com

    1. In Sigma, go to Administration > Developer Access.

    2. Click Create New.

    3. Select REST API as the scope.

    4. Enter a Name (for example, Datalogz Control Tower) and an optional Description.

    5. Select the Owner for the credentials. We recommend the dedicated service account from Step 1.

    6. Click Create and copy the Client ID and Client Secret. The secret is only displayed once.

    1. Sign in to Datalogz Control Tower and go to Settings > BI Connectors.

    2. Click New Connector and select Sigma.

    3. Enter the API base URL, Client ID, and Client Secret, then click Connect.

    4. Enter a Connector Name and select the snapshot frequency (for example Daily or Weekly).

    5. Click Next, then Confirm and Finish.

    For questions or help with this setup, contact support@datalogz.io.

    Step 1: Confirm Admin access and API availability

    API credentials inherit the permissions of the user account you assign them to. We recommend creating a dedicated service account user in Sigma, rather than tying credentials to an individual, so access is not disrupted if that person leaves.

    Step 2: Identify your Sigma API base URL

    Using the wrong host causes authentication to fail even with valid credentials.

    Step 3: Generate API client credentials

    Step 4: Create the connector in Control Tower

    Qlik Sense host URL
  • Virtual proxy prefix

  • Virtual proxy header name

  • Virtual proxy header value

    1. Sign in to Datalogz Control Tower and go to Settings > BI Connectors.

    2. Click New Connector and select Qlik Sense.

    3. Enter the Host, Virtual proxy prefix, Virtual proxy header name, and Virtual proxy header value. Optionally add the NPrinting configuration (see below).

    4. Click Connect.

    5. Enter a Connector Name and select the snapshot frequency (for example Daily or Weekly).

    6. Click Next, then Confirm and Finish.

    NPrinting monitoring is optional but highly recommended: it lets Control Tower track the usage and distribution of reports from Qlik Sense. The steps assume NPrinting is already installed and configured in your environment. Have the following ready:

    • NPrinting Server Name

    • NPrinting Port

    • NPrinting User Domain

    • NPrinting User Name

    • NPrinting Password

    For questions or help with this setup, contact support@datalogz.io.

    Certificate authentication is available on request. It requires Datalogz to hold a copy of the client SSL certificate, and all requests carry administrator-level permissions.

    Step 1: Create the virtual proxy in the Qlik Management Console (QMC)

    Step 2: Create the connector in Control Tower

    Optional: NPrinting

    Under Certificates & secrets, create a client secret and copy its value immediately. It cannot be viewed again later.

    1. Sign in to Datalogz Control Tower and go to Settings > BI Connectors.

    2. Click New Connector and select SharePoint.

    3. Choose your authentication mode. For app mode, enter the Directory (Tenant) ID, Application (Client) ID, and client secret. For user mode, follow the device-code sign-in prompts.

    4. Choose the scope: sync all sites in the tenant or an allowlist of specific sites.

    5. Enter a Connector Name and select the snapshot frequency.

    6. Click Next, then Confirm and Finish.

    For questions or help with this setup, contact support@datalogz.io.

    Step 1: Register an application in Microsoft Entra (app mode)

    Register a new application

    Step 2: Create the connector in Control Tower

    Control Tower ingests sites, document libraries, and files, including an inventory of Excel workbooks (worksheets, tables, pivot tables, and more). Syncs are incremental, so unchanged libraries are not re-scanned.

    Features: which monitors are active, workflows, and BI360 configuration.

    Work through these three steps in order.

    In User Groups, create groups based on teams or departments (for example, Finance Analysts or Marketing Ops) and assign a role to each. Members inherit the group's permissions, which keeps access consistent and simple to manage.

    In Teams, scope the parts of the BI environment you want managed. Create teams that mirror how you organize your estate, for example a team for production Power BI capacities or specific Tableau projects. During setup, select which monitors should be active for the team (available monitors depend on what is enabled in the Monitor Catalog) and add users or user groups. Assign at least Member access so people can see the team's assets, monitors, and metadata.

    In Users, invite the people who need access to Control Tower and add them to their groups and teams.

    From there, alerts start arriving on the Home dashboard, and BI360 begins building the executive view of your analytics estate.

    Both Datalogz System Admins and General Admins see every setting, but only the System Admin can configure everything. If an option described here is missing for you, check with your admin about your assigned role.

    Before you start

    Where everything lives

    Your first 15 minutes

    1. Create user groups

    2. Create teams

    3. Invite users

    Connector Admin Adds, configures, and removes the account's connectors and their credentials.

    Account Settings Admin Manages account settings, single sign-on (SSO), and OAuth clients.

    BI Admin Day-to-day administration of the account. A BI Admin manages users and groups, creates and deletes teams, manages team rosters and ownership, has admin access to every team and its configuration, and manages connectors, account settings, and the monitor catalog. BI Admins can view BI360 definitions and workflow templates but cannot edit them.

    System Admin Every account permission. This includes everything a BI Admin can do, plus editing BI360 definitions and workflow templates. The only actions out of reach are the few reserved for Application Admins.

    BI360 Viewer Views account-wide BI360 definitions and analytics.

    BI360 Admin Creates and edits account-wide BI360 definitions. Includes everything a BI360 Viewer can do.

    Workflow Viewer Views the account's workflow templates.

    Workflow Editor Creates and edits workflow templates. Includes everything a Workflow Viewer can do.

    Every user in a team holds one of three roles.

    Member Sees the team's data: assets, monitors, and analytics for the team's connectors.

    Admin Everything a Member can do, plus team configuration: connectors, monitors, and who belongs to the team.

    Owner Everything an Admin can do, plus deleting the team and transferring ownership. Each team has exactly one owner, and the owner is always a user. Transferring ownership makes the previous owner an Admin.

    Groups can be added to a team as Members or Admins. A group cannot own a team.

    Some account roles include a seat in every team without needing a membership. BI Viewer gives Member access to every team. BI Admin and System Admin give Admin access to every team, and can also delete any team or transfer its ownership.

    Application Admin is a user type, not an assignable role. Application Admins bypass every permission check, and a few actions are reserved for them. Keep this to a small number of people and use System Admin for full day-to-day access.

    Managing users requires the BI Admin or System Admin role. When assigning roles, you can only grant what you already hold: a role cannot be given to a user or group if it includes permissions the person assigning it does not have.

    Account roles

    Everyday roles

    Administration roles

    BI360 roles

    Workflow roles

    Team roles

    Application Admin

    Assigning roles

    1. Choose what to aggregate by, for example department.

    2. When the next sync completes, your taxonomy appears in the inventory and in BI360.

    Click View Connection on a card to manage its mapping:

    • Download Original retrieves the mapping file currently in use.

    • Replace File uploads a new version. The previous mapping is replaced.

    • Resync re-applies the mapping immediately, without waiting for the next scheduled sync.

    • Delete removes the mapping and its taxonomy from your insights.

    Your Customer Success Manager can provide a mapping file template and help with formatting.

    How it works

    Set up asset mapping

    Manage an existing mapping

    Pair asset mapping with the Entra ID connector and both sides of your estate roll up to the same organizational view: Entra ID maps the people, asset mapping maps the content. If there is overlap between Entra ID and Asset Mapping, the information from Entra ID takes precedence over Asset Mapping.

    Go to Settings > Teams.

  • Click New Team.

  • Give the team a name.

  • Select a connector. You can assign only one connector to one team at a time.

  • Select the Platform Context. These are specific to the selected BI connector, for example Power BI workspaces or Tableau projects. Use one of the following ways to find what you are looking for:

    1. Scroll through the list to find the platform context you want to add to your team.

    2. Select Always use all [platform contexts] to automatically include all workspaces, projects, streams or library folders (depending on the selected BI tool).

    3. Use the search bar to find platform contexts using an expression like [name] contains "".

  • Select users that should have access to the team.

  • Click Create Team.

  • All teams you have access to appear in a dropdown menu in the side navigation, and team updates are also displayed on your home page. Teams are only visible if you have access to them. If you are an admin, you can also track the Teams activity on the home page.

    Follow these steps to permanently delete a team from your Datalogz Control Tower.

    • Go to Settings > Teams.

    • Click the team you want to delete.

    • Click Delete.

    When onboarding is complete, Datalogz automatically creates a default team with the highest level of privileges for your organization. This team ensures that administrators have immediate access to manage users, teams, and permissions.

    Users and actions they can do

    Create a Team

    View Teams and Team Activity

    Delete a Team

    Deleting a team does not remove its users. However, it will permanently delete all connectors and platform contexts associated with the team. This action cannot be undone, and the data cannot be recovered.

    Tableau Roles and Licenses

    Recommended Roles and Licenses

    We recommend to use a Creator license with the Site Administrator Creator role for the easiest setup and most complete ingestion result.

    Tableau activity metadata is harvested from an S3 file. Datalogz needs access to the S3 bucket where the file is stored.

    Other supported Roles and Licenses

    Datalogz supports the following licenses:

    • Creator License (recommended)

    • Explorer License

    Datalogz supports the following roles to connect to your Tableau site and harvest metadata:

    • Administrator

    • Explorer, with

    First, make sure that the following settings are enabled in Settings > General:

    • Data Management, which is required to run the Tableau Metadata API and give the Explorer user access to databases and tables.

    • Automatically grant authorized users access to metadata about databases and tables

    • Show complete lineage (default)

    • Turn on Tableau Catalogue (only when you want to configure access on an asset to asset basis).

    Next, give the Explorer access to Tableau projects:

    • For large projects that change often, we recommend making the Explorer a project leader. This ensures that the Explorer can access all Tableau assets within the project, including databases and tables.

    • For projects where project leader status cannot be given, make sure that the Explorer has view access to all assets within the project.

    Spotfire

    This guide sets up the Spotfire connector. Datalogz extracts Spotfire metadata directly from the underlying Oracle repository database; support for other repository database types is not available at this time. Datalogz reads metadata only.

    Before you start

    Have the following ready, and decide whether you will connect via hostname and Service Name/SID or via DSN:

    • The hostname of the database server.

    • A database username and password with access to the Spotfire repository.

    • The Oracle Service Name or SID (for hostname connections) or the DSN.

    • Optionally, the Oracle protocol (TCP or TCPS for SSL).

    1. Sign in to Datalogz Control Tower and go to Settings > BI Connectors.

    2. Click New Connector and select Spotfire.

    3. Enter the connection details for your chosen method (see the parameter reference below), then click Connect.

    4. Enter a Connector Name and select the snapshot frequency (for example Daily or Weekly).

    Parameter
    Description

    For questions or help with this setup, contact support@datalogz.io.

    Tableau

    Applies to: Tableau Cloud, Tableau Server (version 2022.3 or later)

    Connect your Tableau Server or Tableau Cloud environment to Datalogz Control Tower.

    Datalogz authenticates to Tableau with a direct-trust connected app, Tableau's recommended long-lived authentication method. You provide an administrative Personal Access Token (PAT), and Control Tower creates and configures the connected app for you on each site you select.

    The setup wizard lets you choose, per site, between a connected app and a PAT. A connected app is the recommended option.

    • An administrative Personal Access Token (PAT):

      • For a single site, a Site Administrator PAT for that site (for example, Site Administrator Creator on Tableau Cloud).

    Connected apps (OAuth clients)

    OAuth clients allow external applications to connect securely to Datalogz without using a user’s password. Currently, OAuth clients provide access to the Datalogz MCP server.

    Each OAuth client belongs to your organization. MCP clients can access data from all active connectors in the organization; access is not limited by team membership.

    You need the Account Settings Admin, BI Admin, or System Admin role to manage OAuth clients.

    Type
    Use it for
    Credentials

    Click Next, then Confirm and Finish.

    DSN

    For DSN connections: the data source name configured for the repository database.

    Is SSL Connection?

    Whether communication with the database is encrypted using SSL/TLS.

    Username

    The database user for the Oracle repository (not your Spotfire user). Must have read access to the Spotfire metadata.

    Password

    The password for that database user.

    Hostname

    The network address (domain name or IP) of the database server.

    Protocol

    The communication method used to reach the database. TCPS enables SSL/TLS encryption.

    Service Name / SID

    Oracle identifiers for the database instance. Service Name is the modern, preferred option; SID is the older form.

    Create the connector in Control Tower

    Parameter reference

    Viewer

    Reports, workbooks, data sources (limited scope)

    Not supported

    Explorer (no external asset access)

    Reports, workbooks, data sources (limited scope)

    Supported, but without lineage. Databases and tables are not available.

    Explorer (with external asset access)

    Reports, workbooks, data sources, databases and tables

    Requires correct permissions and Tableau Catalog settings

    Site Administrator

    (Recommended)

    All Tableau content

    Access limited to assigned Tableau sites.

    Server Administrator

    All Tableau content

    Best Practice: How to Configure the Explorer Role

    configured permissions

    Full server-wide access

    For multiple sites on a Tableau Server, a Server Administrator PAT, which lets Control Tower list every site. A Site Administrator PAT covers the single site you sign in to.

  • Your Tableau host URL (for example, https://10ax.online.tableau.com for Cloud, or https://tableau.acme.internal for Server).

  • The site name, which is the URL slug after /site/ (for example, acme-prod). Tableau Cloud requires it. For Tableau Server, leave it blank to use the default site.

  • Control Tower detects your Tableau REST API version automatically.

    1. In Tableau, open My Account Settings.

    2. Under Personal Access Tokens, enter a token name (for example, datalogz-pat) and click Create Token.

    3. Copy the token name and the secret. Tableau shows the secret only once.

    Assign the token to a user with the right role: Site Administrator for a single site, or Server Administrator to connect multiple sites on a Server.

    1. Go to Settings → BI Connectors and click New Connector.

    2. On Select a BI platform, choose Tableau.

    3. On Authenticate and connect, fill in the credential card:

      • Host: your Tableau URL (a Cloud or Server badge appears as you type).

      • Site: the site URL slug (required for Cloud, blank for the default Server site).

      • Token: your PAT name from Step 1.

      • Secret: your PAT secret from Step 1.

    4. Click Test Connection. Control Tower signs in, detects the API version, and lists the site(s) it can see.

    5. In the site table, select the site(s) you want to connect. For each selected site, use the "Use" dropdown to choose how Datalogz authenticates:

      • Connected App (default, recommended): Control Tower creates a direct-trust connected app and secret on that site and uses it for all future syncs.

      • Personal Access Token: Control Tower keeps using the PAT you entered for that site.

      To connect another host, click + Add another credential set and repeat.

    6. Click Continue.

    7. On Choose connector components, enter a Connector Name and set the Asset Snapshots schedule (for example, Every Day at 1:00 PM). Click Next.

    8. On Finish, review the name and schedule, then click Confirm and Finish.

    For any site you connected with Connected App:

    1. In Tableau, go to Settings → Connected Apps.

    2. Look for a direct-trust app named Datalogz Connector <id>, shown as enabled.

    3. Datalogz uses read-only scopes for metadata extraction: tableau:content:read plus related read scopes (users, groups, projects, sites, tasks, and, on newer Tableau versions, databases, tables, permissions, flows, and others). All access is read-only.

    After the connector completes its first successful sync, the connected app handles authentication on its own for sites set to Connected App. At that point you can delete or revoke the administrative PAT in Tableau.

    Revoke the PAT only for sites you set to Connected App. Sites set to Personal Access Token keep using the PAT, so revoking it stops those sites from syncing. Keep the PAT if you might want to re-provision a connected app later.

    • Multiple sites and hosts: A single Tableau connector can cover multiple sites and multiple hosts (via + Add another credential set). You can use Connected App for some sites and Personal Access Token for others.

    • Snapshot schedule: Choose daily or weekly, at a time of day you prefer. You can change this later in the connector's settings.

    How authentication works

    What you'll need

    Step 1: Create an administrative PAT in Tableau

    Step 2: Add the connector in Control Tower

    Step 3: Verify the connected app in Tableau

    Step 4: Revoke the setup PAT (optional)

    Notes

    Client ID and client secret

    Interactive PKCE

    Applications where a user signs in and approves access, such as an MCP client

    Client ID and redirect URI; no client secret

    Some MCP applications register automatically. After an administrator approves the connection, the client appears on this page.

    Create an Interactive PKCE client manually only when the application asks you to provide a client ID and redirect URI.

    1. In Datalogz, open Organization → OAuth Clients.

    2. Select New OAuth Client.

    3. Enter a recognizable name, such as Analytics assistant — Production.

    4. Select the client type.

    5. For an Interactive PKCE client, enter the exact redirect URI supplied by the external application.

    6. Select Create.

    Redirect URIs must:

    • Match the external application’s callback URI exactly.

    • Use HTTPS, except for local applications using localhost.

    • Not contain wildcards.

    • Be added individually when the application uses more than one callback URI.

    After creating a Machine credentials client, copy the client ID and client secret immediately.

    The secret is shown only once and cannot be recovered later. Store it in a password manager or secrets-management system. Do not place it in source code, documentation, or chat messages.

    Interactive PKCE clients do not have a client secret. Copy the generated client ID into the external application when requested.

    When connecting, the user is redirected to Datalogz to sign in and approve access.

    OAuth client credentials cannot be edited or regenerated.

    To replace a client:

    1. Create a new OAuth client.

    2. Update the external application with the new credentials.

    3. Confirm that the application can connect.

    4. Delete the old client.

    Select the delete action next to the client you want to remove.

    Deleting a client is permanent. The application immediately loses access, and its existing tokens and interactive authorizations can no longer be used. Other OAuth clients are not affected.

    Delete clients that are unused, belong to retired applications, or may have been compromised.

    • Create a separate client for each application and environment.

    • Use names that clearly identify the application and owner.

    • Treat a machine client secret like a password.

    • Register only redirect URIs you trust.

    • Delete clients as soon as they are no longer needed.

    Machine credentials

    Connected apps (OAuth clients)

    Client types

    Services, scripts, and unattended automations

    Create an OAuth client

    Machine credentials

    Interactive PKCE

    Replace credentials

    Delete an OAuth client

    Recommended practices

    Getting Started

    Setup goes fastest when the right people are involved from day one. Five roles play a part in setting up Datalogz Control Tower. Here is what each role owns, with a checklist of actions for each.

    1. Security/Identity Lead

    This individual or team manages your organization's identity and access control system, such as Microsoft Entra ID (formerly Azure AD). Their primary responsibility is to create and secure the credentials Datalogz will use to access your BI and data environments.

    Checklists:

    • Select a log-in method for accessing Datalogz.

    • In case of Microsoft authentication, allow users to sign in to Datalogz.

    For more information, see the log-in methods documentation.

    As an Account admin, create a and give it the account admin role.

    • Create a dedicated Service Principal for the Datalogz application within your identity provider.

    • Grant the Service Principal the least-privilege permissions required to access the necessary APIs.

    • Securely share the client ID and client secret with the Datalogz team.

    Fore more information, see the .

    • Create a dedicated local authentication user with a Site Administrator role in the sites you want to connect to.

    For more information, see the .

    Go to Administration > Developer access and retrieve the following information:

    • The API base URL

    • A Client ID

    • A Client Secret

    The (BI) Administrator is the primary point of contact for your Business Intelligence platform, such as Databricks, Power BI, Tableau, Qlik and Spotfire. They will confirm that the Datalogz platform can successfully connect to and scan your environment.

    Checklists:

    As a Workspace admin, assign the service principal on each workspace you want monitored.

    • Verify that the Service Principal has the correct Power BI Service Admin permissions.

    • Work with the Security Lead to ensure the Datalogz application is properly registered in your BI environment.

    • Confirm that Datalogz can successfully ingest metadata from your BI platform.

    The Network Lead is responsible for managing your organization's network security, including firewalls and network policies. They will ensure Datalogz has the required access to communicate with your internal systems.

    Checklist:

    • Whitelist the necessary Datalogz URLs and/or IP addresses on your corporate firewall:

      • 3.16.88.123

    • Confirm that there are no proxy or firewall restrictions that would prevent Datalogz from connecting to your BI and data platforms.

    This individual manages your Snowflake data warehouse. Their responsibility is to create the dedicated user account for Datalogz and grant it the appropriate read-only access to your metadata.

    Checklist:

    • Create a new, dedicated read-only user for Datalogz within your data warehouse.

    • Grant the Datalogz user the required read-only permissions to query the account usage and metadata views.

    • If your organization has IP whitelisting for your data warehouse, add the Datalogz IP addresses to the allowlist.

    Your dedicated Datalogz representative will be your guide through the entire process. They will provide the specific technical details, perform the initial scans, and support your team throughout the setup.

    Checklist:

    • Provide the required technical documentation for all setup steps.

    • Confirm the URLs and IP addresses that need to be whitelisted.

    • Validate the Service Principal and data warehouse credentials you provide.

    • Schedule and perform the initial data scans.

    Connector Onboarding Guide

    Connect each of your BI platforms to Datalogz Control Tower once; everything else, from inventory to monitoring, follows automatically. This page is the starting point: pick your platform, see what to prepare, and know what to expect after connecting.

    An active Datalogz account and license are required before starting these guides. Contact customers@datalogz.io if you do not have one yet.

    Choose your platform

    Each platform guide lists exactly which credentials to prepare and which settings to apply. Have the right person from the Getting Started roles available; creating credentials usually requires an admin of the platform.

    Platform
    Authentication
    Which metadata Datalogz reads

    Power BI

    Microsoft Entra service principal

    Workspaces, reports, dashboards, semantic models, dataflows, apps, capacity and activity data

    1. Create credentials in your BI platform. Your platform's guide shows how, step by step.

    2. In Control Tower, go to Settings > BI Connectors, click New Connector, and select your platform.

    3. Enter the credentials. Control Tower tests them before saving, so a typo never becomes a broken connector.

    4. Name the connector, choose the sync schedule (for example Daily or Weekly), and scope what to monitor.

    • The first sync builds your inventory, and default monitors activate automatically. Alerts begin appearing on the Home dashboard.

    • Syncs run on the schedule you chose. You can trigger a manual refresh anytime from the connector's detail page, where you can also follow sync status and history.

    • When a credential is about to expire (for example a client secret or personal access token), re-authenticate from the connector's detail page. We recommend setting expiry reminders when you create credentials.

    • Check the connector's sync history and logs on its detail page; failed runs show which step went wrong.

    • The most common causes are an expired secret or token, missing tenant settings (Power BI), a wrong API host (Sigma), or a firewall blocking Datalogz. The IP addresses to whitelist are in the Getting Started guide.

    • Still stuck? Contact support@datalogz.io with the connector name and the time of the failed sync.

    Connectors read metadata only. They never access the data inside your reports, dashboards, or files.

    Two more connections enrich everything the BI connectors collect by tying it to your organizational structure:

    Connection
    How it connects
    What it adds

    Set up the user mapping with the Entra ID guide, and see Asset Mapping for the file format and upload steps.

    Power BI

    Applies to: Power BI Premium Per User (PPU), Power BI Premium Capacity, Power BI Pro, Power BI Shared Capacity, Fabric Capacity, Fabric Trial Capacity

    This guide sets up the Power BI connector using a service principal, Microsoft's recommended method for automated, application-level access.

    Datalogz reads metadata only. It calls Power BI's read-only admin APIs for workspace, report, dataset, refresh, datasource, and activity information. It does not read the data inside your reports, and it does not write anything back to your tenant. The separate setting that permits writes, Service principals can access admin APIs used for updates, is not required by this setup and should stay off.

    Microsoft grants this access at the security group level rather than per API. Per their documentation: "By including the service principal in the allowed security group, you're giving the service principal read-only access to all the information available through admin APIs (current and future)." Create a group dedicated to this connector so its membership stays limited to the application you register in Step 1.

    You will complete four steps: register an application in Microsoft Entra, add it to a security group, allow that group in your Power BI tenant, and create the connector in Datalogz Control Tower.

    You will need two people, or one person holding both roles: someone with Microsoft Entra admin rights to register the application and create the group, and a Fabric administrator to change the tenant settings, which is the role Microsoft requires for Admin API settings.

    Step 1: Register an application in Microsoft Entra

    1. Register a new application in the Microsoft Entra portal. Note the Application (client) ID and Directory (tenant) ID shown on the Overview screen; you will need both later.

    2. Under Manage, select Certificates & secrets, then New client secret.

    3. Enter a description and leave the expiry at the recommended 180 days. You can choose a different duration, but when the secret expires you will need to create a new one and re-authenticate the connector.

    4. Click Add and copy the secret Value immediately. This is your Application Secret Value. It cannot be viewed again after you leave the page.

    1. In the Microsoft Entra portal, with Group type: Security.

    2. Enter a Group name. You will need it for the tenant configuration in the next step.

    3. Under Members, search for the application you registered in Step 1, select it, and confirm. The application should now appear under Direct members.

    1. From the Power BI admin portal, open Tenant settings:

      1. Under Developer settings, find Service principals can call Fabric public APIs, select Specific security groups, enter your security group, and click Apply.

      2. Under Admin API settings, do the same for each of the following: Service principals can access read-only admin APIs, Enhance admin APIs responses with detailed metadata, and Enhance admin APIs responses with DAX and mashup expressions.

    1. Sign in to Datalogz Control Tower and go to Settings > BI Connectors.

    2. Click New Connector and select Power BI.

    3. Select Connect using a Service Principal (SP) and click Connect.

    4. Enter the Directory (Tenant) ID, Application (Client) ID, and Application Secret Value

    Capacity monitoring is optional but highly recommended if you run Premium or Fabric capacities. It lets Control Tower track capacity usage with the application you registered above.

    1. In the Power BI admin portal, under Tenant settings > Integration settings, find Semantic Model Execute Queries REST API, select Specific security groups, enter your security group, and click Apply.

    2. Install the : in Power BI, go to Apps, search for it and add it, then open the Microsoft Fabric Capacity Metrics workspace it creates, go to Manage Access, and grant Admin permissions to your security group. Run the app once to start data flowing.

    3. Note the ID of the Fabric Capacity Metrics semantic model. You can find it in the URL when viewing the semantic model in your browser. Enter it in the capacity settings of your Power BI connector.

    For questions or help with this setup, contact support@datalogz.io.

    Databricks

    This guide sets up the Databricks connector using an account-level service principal with OAuth machine-to-machine (M2M) authentication. The Databricks connector brings your Databricks account into Datalogz Control Tower: workspaces, Unity Catalog assets, lineage, dashboards, and Genie agents, including how people actually use those agents.

    Datalogz reads metadata only: names, owners, structure, lineage and usage of your Databricks assets. It never reads the data inside your tables, and it makes no changes to your Databricks account.

    You need people with these roles in Databricks:

    • Account admin, to create the service principal and give it the account admin role

    • Workspace admin on each workspace you want monitored, to assign the service principal

    Unity Catalog should be enabled on the workspaces you want monitored.

    Confirm. The first sync starts immediately.

    Tableau

    Personal access token (per site) or Connected app

    Sites, projects, workbooks, views, data sources, usage

    Qlik Sense

    Virtual proxy with header authentication

    Streams, apps, sheets, tasks, activity logs

    Sigma

    OAuth client credentials

    Workbooks, data models, connections, members

    Spotfire

    Oracle repository database connection

    Library content, lineage, activity

    Databricks (Private Preview)

    Account-level service principal (OAuth M2M)

    Workspaces, Unity Catalog, Genie Spaces, SQL warehouses

    SharePoint (Private Preview)

    Microsoft Graph (app or user mode)

    Sites, document libraries, Excel workbook inventory

    Entra ID

    Microsoft Entra service principal with read-only directory access

    Maps BI users to their departments, so adoption, activity, and ownership roll up by department in the inventory and BI360

    Asset Mapping

    Mapping file upload (CSV or XLSX)

    Maps assets to your sectors, business units, domains, or other logical groups, so health, usage, and cost roll up by the part of the business that owns the content

    Setup is the same shape everywhere

    After you connect

    Troubleshooting

    Identity and asset mapping

    If you want to trace lineage to your gateway, go to Manage Connections and Gateways, and do the following:

    1. Click On-premises data gateways.

    2. Search for the name of the security group.

    3. Change role to Admin and click Share.

    from Step 1, then click
    Connect
    .
  • Enter a Connector Name, select the snapshot frequency (for example Daily or Weekly), choose which workspace types to monitor (Premium, Shared, and/or Personal), and select whether to capture Activity and Capacity metadata.

  • Click Next, then Confirm and Finish.

  • The registered application must not have any admin-consent-required permissions set on it. Microsoft requires a clean app registration for service principal authentication.

    Step 2: Create a security group and add the application

    Step 3: Allow the group in your Power BI tenant

    Power BI tenant configuration changes can take 15 minutes or longer to apply.

    Step 4: Create the connector in Control Tower

    Optional: capacity monitoring

    create a new group
    Microsoft Fabric Capacity Metrics app
    Validate that the security model and user access information is correctly reflected in Datalogz.

    Fore more information, see the Power BI connector documentation.

    • Assign the dedicated Datalogz application user a Site Administrator Creator site role to ensure access to the necessary API endpoints.

    • Create the Personal Access Token (PAT) for the Datalogz user.

    • Capture the following information:

      • The host URL

      • The Tableau site name(s)

      • The API version

    • Confirm that Datalogz can successfully ingest metadata from your Tableau server.

    You need a PAT for every Tableau site you want to sync to Datalogz.

    For more information, see the .

    • Create a virtual proxy with header authentication in the Qlik Management Console (QMC).

    • Ensure the user associated with the API key has the necessary permissions within your Qlik spaces to access apps and data.

    • Confirm that Datalogz can successfully connect to the Qlik APIs and ingest metadata from your Qlik server.

    For more information, see the Qlik connector documentation.

    Datalogz' Spotfire connector directly extracts metadata from your Oracle database. Support for other database types isn't available at this time.

    • Assign the Datalogz application user to the Library Administrator special group in Spotfire Server to grant full access to the library's metadata.

    • Confirm that Datalogz can successfully connect to the Oracle database on which the Spotfire server is set up and ingest metadata from your environment.

    For more information, see the Spotfire connector documentation.

    Provide training and support to your team on using the Datalogz platform.

    2. Administrator(s)

    3. Network Lead

    4. Data Platform Lead / Snowflake Admin (optional)

    This only applies if you are using the Datalogz Snowflake connector for data sharing.

    5. Datalogz Lead

    service principal
    Power BI connector documentation
    Tableau connector documentation

    In the SQL below, replace <application-id> with the service principal's Client ID (Application ID).

    1. Sign in to the Databricks account console for your cloud:

      Cloud
      Account console

      AWS

      https://accounts.cloud.databricks.com

      Azure

      https://accounts.azuredatabricks.net

      Google Cloud

    2. Go to User management > Service principals > Add service principal. Give it a recognizable name, for example datalogz-control-tower.

    3. Open the service principal, go to Roles and turn on Account admin.

    4. Open Credentials & secrets (OAuth secrets) and click Generate secret.

    5. Copy the Client ID and the Secret straight away. Databricks shows the secret only once.

    6. Note your Account ID. You'll find it in the account menu at the top right of the account console.

    OAuth secrets have an expiry date, which you set when you generate them. Rotate the secret before it expires.

    Datalogz discovers every workspace in your account and syncs the ones the service principal can access.

    1. In the account console, go to Workspaces, select a workspace, then Permissions > Add permissions. Add the service principal with the User role.

    2. In the workspace's admin settings (Identity and access > Service principals), confirm the service principal has the Admin access, Databrics SQL access, Workspace access and consumer access entitlements.

    3. Repeat for every workspace you want monitored.

    Run this in a SQL editor as a metastore admin or catalog owner, once for each catalog you want monitored:

    Catalogs without this grant don't appear in Control Tower. New catalogs only show up once they've been granted, so add this grant to your process for creating catalogs.

    Lineage is read from Databricks system tables using a SQL warehouse. A SQL warehouse is not needed for the rest of the inventory.

    1. Make sure the system.access system schema is enabled on each metastore. You can check in Catalog Explorer under the system catalog.

    2. Grant read access to the lineage and audit tables:

      GRANT USE CATALOG ON CATALOG system TO `<application-id>`;
      GRANT USE SCHEMA ON SCHEMA system.access TO `<application-id>`;
      GRANT SELECT ON TABLE system.access.table_lineage TO `<application-id>`;
      GRANT SELECT ON TABLE system.access.audit TO `<application-id>`;
    3. In each workspace, open SQL Warehouses, select a warehouse, open Permissions and give the service principal Can use. We recommend creating a small, dedicated serverless warehouse for Datalogz and granting Can use on that one only.

    • AI/BI dashboards: share the dashboards, or the folders that contain them, with the service principal at Can view.

    • Notebooks: give the service principal Can read on the folders you want inventoried, for example /Workspace/Shared and /Workspace/Users.

    Genie agents have their own access lists. The service principal only sees agents it has been granted access to, and workspace admin doesn't override this.

    1. Add the service principal to a group, for example datalogz-readers.

    2. Share your Genie agents with that group at Can view. This brings the agents into Control Tower: owner, warehouse, grounding tables, instructions, sample questions and access list.

    3. Optional, conversation content: to collect questions, generated SQL and answers from all users, grant the group Can manage on the agents and turn on Enable Genie conversation content in Control Tower (Step 7). With only Can view, Databricks returns just the service principal's own conversations, so agents look unused.

    On the first sync, Datalogz collects Genie conversations from the last 30 days. After that, it only collects what changed. To collect older history, contact support@datalogz.io.

    1. In Control Tower, go to Settings > Connectors > BI Connectors and click New Connector.

    2. In Select a BI platform, choose Databricks.

    3. Enter:

      • Cloud: choose AWS, Azure or Google Cloud. Each option shows its account console host; pick the one you signed in to in Step 1.

      • Account ID

      • Client ID and Client Secret from Step 1

    4. Click Connect. Control Tower checks the credentials and the account admin role.

    5. Review the Workspace Preflight. It lists every workspace Datalogz discovered, with its system schema status and the number of catalogs the service principal can access. Warnings here don't block setup: you can fix them later using the troubleshooting table.

    6. Enter a Connector Name and choose the Asset Snapshots schedule: every day or every week, at a time you choose.

    7. Optionally, turn on Enable Genie conversation content (see Step 6).

    8. Click Next, review the summary, then click Confirm and Finish.

    The first sync of a large estate can take a while, especially for workspaces with tens of thousands of notebooks. If a very large workspace can't be fully inventoried within one sync, Datalogz loads what it collected and marks that workspace as incomplete.

    Before you begin

    -- BROWSE exposes metadata only, never table data.
    GRANT BROWSE ON CATALOG <catalog_name> TO `<application-id>`;

    Step 1: Create a service principal in Databricks

    Why account admin? Datalogz needs it to list your workspaces and Unity Catalog metastores, and to show people's names instead of numeric IDs. Control Tower checks for this role when you connect. Assign it directly to the service principal: a role that only comes through a group may not be detected.

    On Azure: you can use a Databricks-managed service principal (as above) or a Microsoft Entra ID-managed one. The first account admin of an Azure Databricks account is set up through Microsoft Entra ID, so you may need your Entra ID administrator to grant the account admin role.

    Step 2: Add the service principal to your Databricks workspace

    Step 3: Grant Unity Catalog read access

    Step 4: Enable lineage (system tables and a SQL warehouse)

    You don't select a warehouse in Control Tower. Datalogz uses a warehouse the service principal has Can use on, preferring one that is already running and serverless. If the only warehouses it can use are stopped, it starts one during the sync. Granting Can use on a single small warehouse is how you control which warehouse is used and what it costs. Without a warehouse, lineage for that workspace is limited to the tables Genie agents are grounded on.

    Step 5: Dashboards and notebooks

    Step 6: Genie agents

    Can manage also allows editing and deleting the agent. Datalogz only reads, but Databricks has no read-only permission for other users' conversations. Grant it only if you want conversation analytics.

    Step 7: Create the connector in Control Tower

    Qlik Sense Details

    • Qlik Sense data in the Datalogz Control Tower comes from four sources: the QRS API, the Engine API, server audit logs, and the NPrinting API

    • Together, the information from these sources paint a detailed picture about what resources are stored in the Qlik Sense and NPrinting environments and how they are used

    • Metadata is aggregated across sources to generate comprehensive alerts and insights

    Tableau connector documentation

    https://accounts.gcp.databricks.com

    For instance, be aggregating across data from the QRS API, Engine API, and audit logs, we can determine if third party tools, such as VizLib, are going unused
    • From Qlik’s Repository Service API, we fetch most metadata about users and resources in the Qlik Sense environment

    • This includes details about apps, data connections, tasks, users, licenses, and user directories

    • In platform, this information makes up the Inventory page and backs several monitors and visualizations in the Insights and Exec views

    Datalgoz Table
    API Endpoint
    Description of Data

    qlik_sense_apps

    /app/full

    Metadata about apps in Qlik, including when it was created and last reloaded at, which stream it belongs to, its publication status, file size, and more.

    qlik_sense_data_connections

    /dataconnection/full

    Metadata about data connections in Qlik, including the connection string, connection type, who the owner is and who last updated it.

    qlik_sense_license_access_type_overview

    /license/accesstypeoverview

    A snapshot of the total number of licenses of each type and a breakdown of how many are used vs. available.

    • From Qlik’s Engine API, we are able to fetch more detailed information about apps than is available in the QRS API

    • This includes an overview of the types of visualizations in each app as well as lineage information, such as which QVD files are referenced in an app

    • In platform, this metadata is used in the Insights page

    Datalgoz Table
    API Endpoint
    Description of Data

    qlik_sense_app_elements_agg_engine

    GetAllInfos

    A mapping of each element type to the apps that contain it.

    qlik_sense_qvd_files_agg_engine

    GetLineage

    A mapping of each QVD file to the apps that reference it.

    qlik_sense_apps_agg_engine

    GetAllInfos, GetLineage

    A comprehensive apps metric table, including the app element types and QVD files in each app.

    • From Qlik’s server audit logs, which we ingest via a connection to an S3 bucket, we are able to obtain user activity information, including app opens, file uploads, and logins

    • When combined with data from the QRS and Engine APIs, this information is used to produce alerts and insights regarding unused apps and licenses, as well as governance and security concerns such as suspicious logins or unauthorized app access

    Datalgoz Table
    Source
    Description of Data

    qlik_sense_activity_audit

    C:\ProgramData\Qlik\Sense\Log\Repository\Audit\AuditActivity_Repository

    An audit log of user actions in Qlik, such as app opens and file uploads.

    qlik_sense_security_audit

    C:\ProgramData\Qlik\Sense\Log\Repository\Audit\AuditSecurity_Repository

    An audit log of security-related user actions in Qlik, such as logins and user directory syncs.

    • From Qlik’s NPrinting API, we fetch metadata about the resources and users in the NPrinting environment

    • Together, this metadata provides another layer of usage information about the apps in the Qlik Sense environment

    Datalgoz Table
    API Endpoint
    Description of Data

    qlik_sense_nprinting_apps

    /apps

    Metadata about apps in NPrinting, including when it was created and last updated.

    qlik_sense_nprinting_connections

    /connections

    Metadata about connections in NPrinting, including the connection status, source, and associated app.

    qlik_sense_nprinting_reports

    /reports

    Metadata about reports in NPrinting, including the report type and output formats.

    Qlik Sense Metadata

    QRS API

    Engine API

    Audit Logs

    NPrinting

    qlik_sense_analyzer_license_users

    /license/analyzeraccesstype/full

    All users with the analyzer license type.

    qlik_sense_professional_license_users

    /license/professionalaccesstype/full

    All users with the professional license type.

    qlik_sense_streams

    /stream/full

    Metadata about streams in Qlik, including the owner and when it was created and last updated.

    qlik_sense_tasks

    /task/full

    Metadata about the various tasks in Qlik (reloads, external programs, user syncs, and distributes), including the last execution duration and status, whether it is manual or automatic, and the next execution time.

    qlik_sense_user_directories

    /userdirectory/full

    Metadata about the user directories in the Qlik environment, including the type of directory and when it last successfully synced.

    qlik_sense_users

    /user/full

    Metadata about users in Qlik, including their roles and attributes and which directory they’re a member of.

    qlik_sense_nprinting_roles

    /roles

    Details about each of the role types in NPrinting and whether it’s enabled in the environment.

    qlik_sense_nprinting_task_executions

    /tasks/<task_id>/executions

    A log of the task executions in the NPrinting environment, including the execution type and completion status.

    qlik_sense_nprinting_tasks

    /tasks

    Metadata about tasks in NPrinting, including the task type, whether it is enabled, and the associated app, when applicable.

    qlik_sense_nprinting_user_roles

    /users/<user_id>/roles

    A mapping of NPrinting users to the roles assigned to them.

    qlik_sense_nprinting_users

    /users

    Metadata about users in NPrinting, including their email and domain account.

    Single Sign-On (SSO)

    Datalogz supports self-service SAML single sign-on, so an administrator can connect your identity provider directly, without a support ticket. This is part of Organizational Setup.

    Configuring SSO requires the Sys Admin permission. If you do not see the SSO settings, ask an administrator with that permission to complete the setup.

    How to configure SAML SSO

    1. Go to Settings > Single Sign-On.

    2. Click Configure SSO.

    3. Enter the SAML details from your identity provider: the Sign-in URL, Issuer / Entity ID, and the signing certificate.

    4. Copy the Datalogz Assured Consumer Service (ACS) URL and Entity ID into your identity provider's SAML application.

    5. Click Save to store the configuration, then use Test connection to confirm a successful round trip before rolling it out to users.

    For users who are not signing in through SSO, Datalogz offers a passwordless email login. The user enters their email, receives a one-time code, and enters it to sign in. There is no password to set, store, or reset.

    Administrators can show a configurable announcement banner on the login screen, for example to communicate planned maintenance or a change to sign-in. The banner is driven by configuration and appears to every user before they sign in.

    For questions or help with this setup, contact support@datalogz.io.

    Passwordless email sign-in

    Login screen announcement banner

    Datalogz BI Pillars

    A healthy analytics environment requires attention across five essential pillars: Security, Cost Management, Governance, Quality Standards, and Performance. Every monitor and alert in Datalogz Control Tower is tagged with one or more of these pillars, so you always know why an issue matters and who should care about it.

    Security

    Security is continuous oversight of who can access your BI environment and how it is being used. Control Tower flags risks such as unusual access activity, suspicious export behavior, and permission changes on sensitive assets.

    What you do: review security alerts as they appear and route them to the right owner. High-visibility assets get extra protection automatically.

    Cost Management

    Cost Management is about getting full value from your BI investment without waste. Control Tower identifies unused licenses, idle reports and dashboards, redundant refreshes, and other avoidable spend across your BI tools.

    What you do: review surfaced savings opportunities, confirm with asset owners, and clean up. Most customers surface measurable savings within the first weeks.

    Governance

    Governance keeps your analytics estate structured, owned, and compliant. Control Tower detects orphaned and unowned assets, uncertified content, stale reports, and policy breaches such as users outside your SSO standard. Control Tower finds duplicate measures, reports built without a proper data model, and conflicting or redundant content that leads to inconsistent answers across teams.

    What you do: assign owners to unowned assets, certify the content your organization should trust, and retire what is stale. Consolidate duplicates and standardize on certified definitions so every team reports from the same source of truth.

    Performance ensures reporting stays fast and reliable. Control Tower tracks failed and long-running refreshes, capacity pressure, and configuration issues before they slow your users down.

    What you do: act on refresh and capacity alerts to keep dashboards loading and data fresh.

    Control Tower ships with a catalog of curated default monitors for each connected BI platform (Power BI, Tableau, Qlik Sense, Sigma, and Databricks). Each monitor continuously checks your environment against a specific rule and is tagged with the pillar it protects. When an asset breaches a rule, an alert is created with the affected asset, the reason, and a recommended fix.

    You can also create custom monitors to track rules specific to your organization, such as internal naming standards or department-specific thresholds.

    Actions to take:

    1. Open the Monitor Catalog and enable the monitors relevant to your environment. Default monitors work out of the box.

    2. Subscribe the right people to monitor notifications so alerts reach owners immediately.

    3. Triage alerts from the Alerts page: assign, prioritize, and resolve. Every change is tracked in an audit trail.

    4. If a check you need is missing, create a custom monitor or request one from the catalog.

    Refresh Analytics

    Refresh Analytics is a tab in on Power BI Workspace asset pages that shows a refresh heatmap of how many semantic models are refreshing according to their schedule and how long those refreshes take. It helps you quickly understand refresh reliability and performance at the workspace level.

    Performance

    How it works

    Longer refreshes create CU peaks that can push your Power BI Fabric capacity into a higher tier.

    Inventory

    Datalogz Framework

    Datalogz Control Tower

    Every enterprise has data infrastructure. Almost none has decision infrastructure.

    Decision infrastructure is the layer that makes sure every decision taken inside the company, whether it comes from a dashboard, a deck, a person, or an AI agent, is traceable, reliable, accurate, consistent, and reached by the cheapest path available. Your data catalog knows your tables. Your quality tool watches your pipelines. Neither one watches the consumption layer, where people and agents actually decide things.

    Datalogz Control Tower is that layer. It reads and continuously monitors your entire analytics estate across every connected platform, and turns what it finds into work that has an owner and an end state.

    These docs cover setting Control Tower up, using it day to day, and the reference material behind it.

    Connected platforms: Power BI, Tableau, Qlik Sense, Sigma, Spotfire, SharePoint, Databricks (preview), and Entra ID for identity.

    Start here

    Setting Control Tower up for the first time

    • Getting Started: who in your organization needs to be involved, and what each person does

    • : connect your first BI platform

    • : add members, set up teams, assign roles

    • and

    Your platforms are connected and you are looking at your estate

    • : what has surfaced, and what to do with it

    • : what Control Tower checks, and how to change it

    • : every asset across every tool, with Lineage for what depends on what

    • : the duplicate and conflicting reports your teams built separately and never reconciled

    Two ideas hold the rest together.

    Monitoring is continuous. Monitors check your connected platforms around the clock. When something needs attention, an alert is created, routed to an owner, and tracked until it is resolved. There is nothing to configure to begin: once a platform is connected, a curated set of core monitors starts running against it. Your team reviews what surfaces, assigns owners, and acts. Scanning, detection, routing, and tracking happen without you.

    Every finding sits under one of four pillars. Security, Cost Management, Governance (which covers quality, ownership, and compliance), and Performance. The pillar tells you why a finding matters and helps you decide what to deal with first.

    You don't need to configure anything to get started. Once your BI platforms are connected, Control Tower begins monitoring with a curated set of default checks. Your team's job is to review the alerts that surface, assign owners, and act on them. Everything else, including scanning, detection, and tracking, happens automatically.

    To learn more about the operational discipline behind the framework, we recommend reading our.

    Semantic Intelligence (preview): the business concepts your organization runs on, mapped across the estate, with drift caught as definitions start to split

  • : the executive picture of health, cost, and coverage across the whole estate

  • : turn a finding into a routed, tracked action

  • How it works

    What this means for you

    Connector Onboarding
    User Onboarding
    Log-in Methods
    Single Sign-On
    Alerts
    Monitors
    Inventory
    BI Similarity
    BI360
    Workflows

    Running a workflow from an alert

    On any alert, workflows whose filters match that alert appear as buttons.

    To run a workflow:

    1. Click the Run Workflow button on the alert page.

    1. Fill in the required inputs: for Send Email, fill in a recipient and a comment.

    1. Click Run.

    The workflow executes immediately. A session record is created in the workflow's , showing the result of each step.

    If required inputs are missing or invalid (for example, an unrecognized user), you'll see an inline error and the workflow will not run. No partial session is saved.

    Monitors

    A monitor is a powerful tool designed to continuously track and evaluate the health and performance of your Business Intelligence (BI) assets. It uses a customizable SQL query to automatically scan your environment for assets that do not meet predefined standards or expectations, such as outdated datasets, underused reports, or security issues. Because monitors are highly customizable, you can edit the SQL query, assign statuses, and determine the team responsible for resolving triggered alerts. This makes them a highly efficient and scalable way to manage large sets of assets and ensure any issues are detected and handled effectively.

    Our monitoring solution includes a set of default monitors to help you oversee your BI environment effectively. Should your organization require additional monitoring capabilities beyond these defaults, Datalogz can create custom monitors tailored to your specific needs. Additionally, you have the option to clone and modify existing monitors to better suit your individual requirements. These personalized monitors can be easily managed in the "My Monitors" section under the Monitor tab.

    are pre-configured monitors designed to cover common and critical scenarios for BI cost, security, performance, and governance. They come with predefined thresholds and logic, ready to use out-of-the-box. They are useful to provide a baseline level of monitoring for all users, ensuring fundamental issues are detected automatically.

    Custom Monitors are highly specific monitor configurations created by Datalogz based on your organization’s unique requirements, business processes, or data sensitivities. These monitors are tailored for a very specific use case within your environment and are not designed to be broadly shipped to other customers. Datalogz can create these monitors on your request and ship them as default monitors.

    To extend monitoring capabilities beyond the defaults, addressing unique operational concerns, compliance requirements, or performance benchmarks specific to your BI usage, contact Datalogz.

    Log-in Methods

    You sign in to Datalogz Control Tower with the log-in method configured at your license activation. Control Tower supports the following methods.

    Sign in by proving your email address. A code will be sent to your email with which you can access your Datalogz Control Tower.

    SAML 2.0 single sign-on, including Okta, is available for enterprise accounts. Contact your Datalogz team to configure it.

    Authentication code

    Enterprise SSO

    history view
    My Monitors are cloned versions of existing monitors that you can adapt for your individual tracking purposes. This allows individual users the flexibility to monitor specific aspects of their BI environment or assets in a way that is most relevant to their personal responsibilities or interests, without affecting the original monitor's configuration for other users.

    When you receive alerts from our monitoring system, it's helpful to understand the two main types: event-based and asset-based alerts. This distinction helps clarify how alerts are triggered and how they might impact the total volume of notifications you receive.

    Event-based alerts are triggered when a specific action or event occurs. These alerts provide notification for individual incidents as they happen. For example, if a user performs 5 or more export operations within a single hour, an alert is generated to flag that specific event.

    Asset-based alerts are alerts that are triggered by changes in the state or status of a particular asset over a period. The focus is on the overall health or status of an asset over time. For example, when an asset is identified as having no recorded activity for a specified duration, an alert is created to reflect its "unused" status.

    Monitor Types

    Default Monitors

    Custom Monitors

    My Monitors

    Default Monitors

    Monitor Alert Types

    Event-Based Alerts

    Asset-Based Alerts

    2.10

    This release introduces a major upgrade to the Datalogz platform, focused on making BI environments easier to monitor, govern, and optimize at scale.

    We’ve redesigned core parts of the platform to:

    • Deliver more actionable alerts with less noise

    • Provide clear executive visibility into BI performance

    • Enable stronger governance and operational workflows

    • Lay the foundation for automation, lineage, and integrations

    New executive-level views make it easier to understand BI performance at a glance.

    • An which shows the BI health at a glance.

    • New with a redefined KPI library (usage, cost, health, governance)

    Result: Faster, clearer insights for business and executive stakeholders.

    We’ve introduced the first version of to support operational processes.

    • Visual + YAML builder: Drag-and-drop jobs on a canvas, or edit the same Workflow as YAML. Pick your view; they stay in sync.

    • Send Email module: Send to a static address, a Datalogz Team, or the alert row's owner via {{owner}}.

    • Manual steps: Pause a run until an approver clicks Approve on the Sessions tab.

    Result: More consistent and scalable BI operations.

    New lineage capabilities in provide visibility into how assets are connected.

    • Understand upstream and downstream dependencies

    • Trace relationships between datasets and reports

    Result: Faster impact analysis and improved trust in your data.

    We’ve completely rebuilt the monitoring and alerting system to help teams focus on what actually matters.

    • Create and manage monitors easily

    • Get cleaner, deduplicated alerts with improved grouping

    • Support for event-based alerts in addition to asset-level issues

    • Better visibility into alert history and context

    Result: Fewer, higher-quality alerts and faster issue resolution.

    We’ve redesigned how metrics are captured and analyzed.

    • Clear distinction between current state and historical trends

    • Improved performance and accuracy of metrics

    Result: Better visibility into how your BI environment is evolving over time.

    • Improved permissions and access control

    • Expanded collections and tagging capabilities

    • Continued rollout of similarity detection

    • New APIs to expose core platform functionality

    Result: More flexibility in organizing, governing, and integrating your BI environment.

    Metric Explorer

    Metric Explorer is the starting page of Semantic Intelligence. It shows the state of metric definitions for the selected connector and team, and lets you open any concept for the full comparison.

    To open it, go to Semantic Intelligence in the left navigation.

    Search business concepts

    Type a concept name in Search business concepts. Suggestions appear as you type, each with its status, its source definition, and how many similar, drifting and conflicting definitions it has. Select a suggestion, or press Search to open the best match.

    Explain this gives a plain-English answer about the concept you searched for, generated by an LLM. It requires the Semantic Intelligence AI add-on and is off by default. Without the add-on, the button is shown but disabled.

    Key figures

    Card
    What it shows

    The scorecard lists one row per business concept, with the most definitions first.

    Column
    Description

    Sort or filter any column. Filtering Status on Conflicting and sorting by Consumers is a quick way to find the disagreements that reach the most reports.

    2026.10.1

    Release date: October 28, 2026

    This release gives you a deeper look inside Tableau data sources, extends Databricks Genie coverage, and tidies up the Inventory Summary, along with fixes to alert counts, Tableau lineage and BI Similarity.

    What's New

    • Tableau Data Attributes: Tableau data sources now have a Data Attributes tab listing their columns and calculated fields, so you can see what a data source contains without opening Tableau.

    • Open in Tableau from every asset: Dashboards, worksheets and workbooks now show their Webpage URL, and every Tableau asset carries the Open in BI icon to jump straight to it in Tableau.

    • Databricks Genie:

      • A benchmark monitor: A new predefined monitor, "Genie agents below benchmark", alerts you when a Genie agent falls below its expected performance.

      • Synonyms and token counts: The Genie agent panel now shows the synonyms defined for each agent, and Genie token counts are visible in the UI.

      • Inventory Summary: The Databricks inventory summary now includes Genie metrics, with drill-through to the assets behind each number.

    • Richer Databricks inventory: Databricks assets now carry their domain, page and tags, which makes them easier to search, filter and organize.

    • Cleaner Top Reports: Top Reports on the Inventory Summary no longer lists Power BI [App] copies next to their source reports, so each report shows up once. The Top Reports and Asset Growth sections also got small layout improvements.

    • Active users over 90 days: Active users are now counted over the last 90 days (previously 30) for Power BI, Qlik and BI 360, which gives a fuller picture of who relies on your content. You can expect active-user numbers to be higher than in previous releases because of the longer window.

    • Faster Alerts page: The Alerts page now loads faster on accounts with large alert volumes.

    • Semantic Intelligence pipeline: Improvements to the Semantic Intelligence processing pipeline for more reliable results.

    • Fixed the side panel "Active Alerts" count and team alert counts not updating after a monitor was removed.

    • Fixed Tableau "Used by Workbooks" lineage, and dashboards now correctly show lineage to their published data sources.

    Sigma monitors

    Sigma monitors are pre-configured monitors to help you quickly begin monitoring common and critical aspects of your Sigma environment. For more information, see the Monitors documentation.

    Control Tower ships 9 default Sigma monitors. Every monitor can be switched on or off in the Monitor Catalog, and cloned into My Monitors to tailor its logic.

    • Broken Connections (Performance): data connections that are failing or no longer reachable.

    • Broken Lineage (Quality Standards): workbooks or data models whose lineage references are broken.

    • Direct User Grants

    Tableau Active Users card: The Active Users card on the Tableau inventory summary is now populated.

    Enhancements

    Platform Stability & Performance

    Bug Fixes

    (Security): permissions granted directly to individual users instead of teams.
  • Empty Teams with Active Grants (Security): teams with no members that still hold permissions.

  • Tag Coverage & Drift (Governance): assets missing required tags or drifting from your tagging standards.

  • Concurrent Materialization Schedules (Performance): materializations scheduled to run at the same time and competing for resources.

  • Duplicate Formulas (Quality Standards): the same formula defined in multiple places.

  • Orphaned Assets (Governance): assets without an active, accountable owner.

  • Personal Workspace Drift (Governance): content accumulating in personal workspaces instead of governed ones.

  • This list contains all out of the box Datalogz Sigma monitors. Customisations can be made by cloning an existing monitor or on request.

    The default monitor catalog

    Credentials vault:
    Reusable variables for Jira, ServiceNow, Slack, PagerDuty, SMTP, and custom integrations. Store secrets once, reference them everywhere.
  • Run from any alert: A Run Workflow dropdown on every alert detail view fires against the rows you've got filtered in.

  • Sessions: Every run logged with status, duration, per-job logs, and approval controls.

  • What’s New

    BI 360 with Executive Summary

    Workflows (v1)

    Dependency Lineage

    Smarter Monitoring & Alerts

    Enhancements

    Enhanced Metrics & Trend Analysis

    Governance & Organization Enhancements

    Check out our new for easy user onboarding.

    executive summary
    insights
    workflows
    Inventory

    Metrics Analyzed

    Metrics analyzed, across how many data models, and how many of them are pass-through.

    Business Concepts

    Distinct business concepts found.

    Single-definition Concepts

    Concepts with one distinct definition, split into those with one metric and those where several metrics share the same definition.

    Standardization (2+ definitions)

    Standardized concepts divided by all concepts with two or more distinct definitions. Single-definition concepts are left out, so this figure reflects only the concepts where disagreement is possible.

    Drifting Concepts

    Concepts with at least one divergent definition, plus the number of conflicting concepts.

    Concept

    The concept name, with a short summary of its least aligned definition underneath.

    Departments

    Number of departments with a definition of this concept.

    Consumers

    Reports built on the data models where this concept is defined.

    # of Definitions

    Number of distinct definitions in the concept.

    Status

    Standardized, Drifting, Conflicting or Single definition.

    Standardization scorecard

    Lineage

    Opens the concept directly in its lineage view.

    Quick Start Guide
    BI Ops Whitepaper

    Monitor Catalog

    The Monitor Catalog is where you control which Datalogz monitors run for each BI platform. Every monitor is on by default.

    What you do:

    1. Go to Settings > Monitor Catalog.

    2. Open the tab for your BI platform (Power BI, Tableau, Qlik Sense, Sigma, or Databricks).

    3. Toggle individual monitors on or off. Monitors you switch off stop generating alerts.

    4. If a check you need is missing, use the request a monitor option and the Datalogz team will follow up.

    The catalog controls what is available account-wide; which monitors run for a specific team is set during team setup.

    2.9.2

    What's new

    Control Tower now includes additional metrics to help you filter, sort, and quickly identify assets that require attention.

    • Workspace asset counts You can now see the total number of assets within a Power BI workspace directly on the workspace asset page and in the workspace inventory table.

    • Report usage metrics Power BI report pages and the report inventory table now display unique views, unique viewers, and download counts, giving you better insight into report adoption and business impact.

    These enhancements make it easier to prioritize monitoring, governance, and cleanup efforts across your Power BI environment.

    2.9

    What's new

    BI 360

    We are excited to introduce BI 360, a revamped executive dashboard that delivers a complete 360 degree view of BI usage, adoption, and licensing across your organization. BI 360 brings together insights that were previously fragmented into one streamlined, executive ready experience.

    BI 360 offers the following featues:

    Cross Tool Insights

    • Compare key asset layers across BI tools to understand where you have the most assets.

    • Instant visibility into BI health at the tenant or server level

    Global BI Inventory

    • Centralized inventory of BI assets across connected tools

    • Browse and search reports, dashboards, datasets, and folders from one place

    • Foundation for deduplication and cleanup initiatives

    • Power BI Inventory now includes Workspace-level insights with:

      • Workspace details

      • Refresh heatmap

    • Improved filtering reliability across inventory views.

    • Inventory filter issues resolved.

    • Global Inventory search now refreshes correctly after clearing search terms.

    • Fixed inconsistencies in alert visibility across the platform.

    • Improved handling of inactive Power BI reports in edge cases.

    2.6.0

    Release date: June 30th, 2025

    Highlights

    Home Page: The home page now welcomes you to Datalogz' Control Tower and shows you a new Alerts widget, an overview of you connectors and their status and your teams' activity. Depending on your role (Root User, Admin, or Member), you'll see a home page designed for you.

    What's New

    • Entra ID Integration: We've introduced a new Entra ID tab in Settings. You can now connect to Entra ID to sync valuable metadata, including user identities, departments, and group memberships.

    • Enhanced BI Similarity Insights: The BI Similarity tab is now available in preview to help you drill down into similar Power BI reports, dashboards, and datasets. This feature now clearly presents identified similar assets and their comparison details, helping you manage your BI landscape more effectively.

    Key Improvements & Fixes

    • "Contact Us" now conveniently opens your default email client with pre-filled subject and description.

    • New Power BI workspaces are now synced with existing connectors after each refresh.

    • Connector re-authentication scenarios have been improved; connectors now work seamlessly after re-authentication.

    Inventory

    Inventory is your operational catalog of every BI asset across tools (Power BI, Tableau, Qlik Sense, Sigma, Spotfire, Databricks, and SharePoint). Built from platform metadata and usage logs, it is the door to governance, cost control, and migrations of your BI estate.

    Inventory opens on two tabs. Summary is where you start: estate-level health and usage ratios, what was created or updated in the last 30 days, your most-viewed reports, and your favorites, enough to tell you where to spend the day. Assets is the full searchable grid, with the columns, filters, and views you need to turn any of those signals into a worklist.

    Inventory views:

    • Team Inventory that shows all assets within a defined team boundary (its projects, streams, or workspaces), with ownership and health in context.

    • Global Inventory that has a cross-platform search and filtering across all connected BI tools, so you can discover, compare, and act on assets across the entire estate.

    • Change detection: the "Start here" panel shows what was created and updated in the last 30 days, with field-level detail on datasets, so the renamed column that silently breaks a downstream report surfaces in days instead of weeks.

    • : workspaces/projects/streams, folders, reports & dashboards, datasets/extracts, data sources, KPIs, and more.

    • Operational state: staleness, failed refreshes, orphaned assets, and similarity alerts, each linked to the asset with quick actions to resolve.

    • Users & ownership: stable IDs, licenses, owners, and teams.

    2.6.1

    Release date: July 14th, 2025

    Highlights

    Get deeper insights into your Power BI environment with our newly introduced BI Similarity tool!

    • Our BI similarity tool has been inproved to include more parameters for report and dataset comparison. This means more efficient management and identification of redundancies or inconsistencies.

    • We've made improvements to the BI Similarity interface, making it easier to visualize and interact with your report similarities.

    Key Bug Fixes:

    • The "Users" section within your Power BI Inventory Table is now correctly populating, providing you with a complete view of your Power BI users.

    • You can now reliably update your connectors from the connector details page without encountering errors.

    BI 360

    BI 360 is the executive view of your entire analytics estate. It brings adoption, usage, licensing, cost efficiency, trends, and a global inventory together in one decision-ready dashboard, across every connected BI tool.

    BI 360 answers one core question: how healthy, valuable, and cost effective is your BI ecosystem, right now and over time?

    • : an auto-generated daily narrative of BI health, changes, and signals, ready to share with leadership.

    • : asset counts and health per layer (organizational, reporting, data, and user) for every BI tool, with department breakdowns when a user directory is connected.

    Alerts

    An alert is the direct result or notification that is triggered when a 's condition is met. It's the action that the system takes to inform you that something requires your attention. It's designed to be actionable, providing you with the necessary information to diagnose and resolve an issue.

    Examples:

    • "The 'Monthly Revenue' dataset refresh failed at 2:00 AM." (This is the alert triggered by a monitor on dataset refresh status.)

    • "A new report was created in the 'Finance' workspace by a user with a non-finance role." (An alert from a governance monitor.)

    • "The 'Executive Dashboard' has not been viewed in over 90 days." (An alert from a monitor on report usage.)

    How to: Use Lineage Effectively

    We recommend the following best practices:

    • Always check lineage before deleting assets

    • Start investigations from Inventory → Asset → Lineage

    • Use health tags + lineage together for prioritization

    • Focus on assets with:

    MCP Server for Analytics opps Teams

    Analytics ops teams who already run Control Tower can now get their answers without interacting with the web interface.

    The data is already there. What may not be that obvious in the UI is how to reach it: open the app, pick the connector, filter the Inventory table, export, reconcile, paste into the doc you were writing. The Control Tower MCP server simplifies this. You ask in the window you are already working in, and the governed answer comes back with the assets behind it.

    What you used to do
    What you ask now

    2.5.0

    Release date: May 20th, 2025

    The 2.5.0 Release of Datalogz focuses on advancing the actionability of alerts and improving Monitor Summary Page layout. This release also includes foundational improvements in testing, observability which will further be enhanced in the upcoming versions.


    • Introduced monitor actions for Power BI (e.g., delete, export, update refresh schedule, take ownership) with corresponding scripts and UI support.

    • Added new monitor for detecting duplicate Power BI dataset measures.

    • Enhanced alert management with bulk workflow updates, sorting, and consolidated alert statistics by status.

    • Updated monitor classifications and action associations for Power BI, Qlik, and Tableau to improve governance, performance, and security coverage.

    • Refined alert filtering, sorting, and statistics, including exclusion of resolved/done alerts from counts.


    Monitors Summary Page Enhancement:

    Coming soon

    Future releases will add:

    • Automatic triggers: run a workflow when an alert opens, closes, or changes status without any manual action.

    • Scheduled triggers: run a workflow on a recurring cron schedule.

    • Additional , including ServiceNow ticket creation and approval gates.

    Workflows

    Workflows turn a monitor alert into a one-click action. Instead of manually deciding what to do each time an alert fires, you configure a workflow once and it appears as a button on every matching alert, ready for anyone with access to run it.

    Each workflow runs one or more , which are the individual actions the workflow takes (for example, sending a notification email). In this release, workflows are triggered manually from monitor alerts, and the available plugin is .

    Notification workflows sit on top of:

    • Inventory: where assets, ownership, and health are defined

    • Monitors & Alerts: where issues are detected (unused, orphaned, failed refresh, etc.)

    They act as the execution layer that ensures these signals lead to action.

    BI Similarity

    BI Similarity automatically detects and quantifies duplication across your BI estate: the multiple versions of the same report or dataset that different teams built and never reconciled. It finds duplicate and near-duplicate assets in Power BI and Tableau, scores how similar they are, and gives you the tools to act.

    With BI Similarity, you can use the Cluster Map to:

    • through similar reports and datasets.

    • what makes the assets similar. Open any pair to see a side-by-side Comparison view with the similarity score, the signals driving it (e.g., overlapping data source), and a metadata diff that highlights which fields are the same and which differ

    2.8

    • New Inventory landing page with instant counts for assets, alerts and similarities.

    • Side panel on every asset with health, owners, and open alerts.

    • Unified search with richer attributes and filters.

    • CSV export (up to 500 rows)

    How to: Solve Common Inventory Use Cases with Filters

    Filters turn the Inventory from a list into answers. This guide works through one common use case end to end; the same pattern applies to most cleanup and governance questions.

    Surface newly created Power BI reports in production that are unhealthy, excluding test artifacts, so they can be fixed before they impact business users.

    Why it matters. New reports have had less time for validation, which makes early-life issues more likely: configuration gaps, performance inefficiencies, or incomplete modelling. Left unnoticed, unhealthy production reports degrade the user experience, increase refresh and capacity pressure, create downstream reliability issues, and reduce trust in production reporting. Reviewing them regularly lets your team intervene early.

    Who owns it. Typically BI administrators, analytics platform owners, and data governance or Center of Excellence teams: the roles responsible for production health and standards.

    Steps:

    1. Open Control Tower and navigate to the team that contains your production Power BI workspaces.

    Open the similarity cluster map, note the candidates, then check usage and lineage per asset

    Rank our reports by near-duplicate count, then show usage and downstream impact for the top one

    Filter the Inventory on Users and open the asset page of the user you want to investigate.

    What does Jordan own, and which workspaces can they reach?

    Screenshot BI360 and hope nobody asks where the number came from

    Where does the asset count on our executive summary come from?

    None of this replaces the app. It replaces the trip to the app when what you needed was one number and the list behind it.

    Filter the Inventory table by source type, export to CSV, count the rows

    How many semantic models sit on Snowflake?

    Open Alerts, set a date filter, then check the connector list and monitor catalog separately

    Summarize 17 August: alerts, refresh failures, new assets, connectors and monitors

    Filter unhealthy assets by alert category.

    Inventory: Workspaces & Visibility

    Fixes

    Select Inventory to view all assets in scope.

  • Click Filters next to the search bar to open the Asset Filters panel.

  • Add rules that exclude assets whose name contains test, dev, or uat, grouped with OR so any match is excluded. If valid production assets contain these strings (for example, "evaluation" contains "uat"), add a rule or group to explicitly include them.

  • Give the filter a descriptive name (for example, production reports), click Save, then Apply.

  • Open the Reports tab and use the attribute filter to show only Unhealthy assets. Sort by creation date to focus on the newest ones first.

  • Use case: find unhealthy new reports in production

    plugins

    How Notification Workflows Fit into Control Tower

    plugins
    Send Email
    Act on the recommendation surfaced in the Comparison view, for example, Possible Redundancy Detected when two assets are highly similar, using the inline actions to Keep Both or Notify Owners

    You can also find similar assets in the Inventory.

    Browse
    Explore
  • Usage & trust: views over time, last-edited dates, sensitivity/endorsement.

  • Asset Health: a clear label indicating whether an asset is healthy or needs attention.

  • What Inventory tracks

    Assets

    2.0.0

    Release date: October 1st, 2024

    What's New

    Enhanced Insights Page

    • BI Tool-Specific Insights: The Insights page has been enhanced to provide customized visualizations based on the type of BI tool being used. Whether you're using PowerBI, Tableau, or Qlik, the Insights page now adapts to show tailored metrics and trends specific to each tool, helping users better understand their BI environments in the context of the tools they rely on.

    Enhanced Default Monitors

    • More Comprehensive Default Monitors: We’ve upgraded our Default Monitors to be more robust and comprehensive, addressing a broader range of issues under the four pillars of Security Monitoring, BI Governance, Platform Administration, and Capacity Monitoring. These enhanced monitors provide deeper insights into your BI environment, identifying more potential issues and improving the overall monitoring experience.

    New Default Monitor Features

    • Show/Hide Monitors: Users can now choose to show or hide specific monitors, allowing for a more personalized and clutter-free view of their monitoring dashboard.

    • Clone Monitors: You can now clone default monitors, making it easy to create custom monitors based on existing configurations.

    • Detailed Monitor Data: Access richer, more detailed data in each monitor. View query logic, underlying metadata, and track changes over time to gain more granular control over your BI monitoring.

    Custom Monitors

    • Create Custom Monitors by Duplicating Default Monitors: Users now have the ability to create custom monitors by duplicating Default Monitors and editing their SQL queries to tailor the monitor to specific needs. These custom monitors can be deleted or further modified, providing full flexibility in how you monitor your BI environment.

    • My Monitors vs Default Monitors: To keep things organized, we’ve introduced two folders in the Monitor section: My Monitors and Default Monitors. The Default Monitors folder houses the pre-built monitors created by our team, while the My Monitors folder holds user-created monitors, giving you a clear separation between system and custom configurations.

    Enhanced Alerts Table

    • Improved Filtering, Search, and Column Data: We’ve enhanced the Alerts Table to make managing and resolving alerts even more efficient. Users can now apply more granular filters, perform faster searches, and access more detailed column data to quickly identify and address critical issues.

    Launch of Teams

    • Teams Feature: We’ve introduced Teams functionality! Organizations can now create and manage teams within the platform. Teams allow users to collaborate more effectively by organizing groups with shared BI goals and content. Assign BI connectors, workspaces, and assets to specific teams, improving collaboration, accountability, and management across departments.

    BI Similarity Resources

    Want to go deeper on BI Similarity? These resources cover both the why and the engine behind it:

    • https://resources.datalogz.io/solving-bi-similarity-with-datalogz-anouk-gorris/

    • https://resources.datalogz.io/inside-the-datalogz-bi-similarity-engine-pablo-lerdo-de-tejada/

    BI Similarity available in preview

    Isolation of Trend Chart and Stats

  • Improved UX

  • Monitor Engine Upgrades

    • Alert Stats on Alerts Page for better understanding about the current state of the Environment’s actionability.

    • Bulk Edit functionality to update Alert status, Priority and Assignment in Bulk at once.

    • Actions: Action has been provided for PBI Assets as a part of Release 2.5. We will continue to build on top of this.


    • Monitor Engine Revamp fixes due to issues introduced in version 2.4.0

    • Fixes for : Alert Table Sorting & Filters not working correctly


    • Admins shouldn’t see the teams which they are not a part of, in the Teams Dropdown. Since they are admins, they should have an option to request to be a part of the team to Owner. [We can cover this in the upcoming releases - Carrying forward from 2.4]

    • All root users and the user who is creating the team should be a part of the team by default. [Carrying forward from 2.4]


    • There are no breaking changes in this release

    1. Overview

    2. New and Updated Features

    3. Monitors

    4. Alert - Stats, Bulk Edit and Actions

    4. Fixed Issues and Bugs

    5. Known Bugs and Limitations

    6. Breaking Changes

    : every BI asset across all tools, with its health, in one list.
    • Executives and business leaders: understand BI adoption, ROI, and overall health at a glance.

    • BI and analytics admins: monitor trends, license usage, and content growth across tools.

    • Platform owners: support decisions on consolidation, optimization, and governance.

    • Use BI 360 for trend and strategic analysis; act on individual assets from your team's inventory and alerts.

    • Pair the insights with Global Inventory when something needs deeper investigation.

    • Review BI 360 on a regular cadence as part of platform governance.

    • Share the Executive Summary PDF with leadership during governance reviews.

    What's inside

    Executive Summary
    BI 360 Insights

    Who it's for

    Best practices

    Global Inventory

    Release Notes

    View the release notes for Datalogz by version.

    Within Datalogz, all alerts generated for a specific team are centralized in the Alerts tab. This tab serves as the primary location for managing and reviewing all notifications relevant to that team's BI assets.

    The Alerts tab displays a comprehensive table of all alerts, and it's equipped with powerful tools to help you manage them efficiently:

    • Filters: Use the filtering options to sort and find specific alerts based on criteria such as monitor, severity, date, or the specific BI asset type involved.

    • Quick Stats: The interface includes quick statistics that provide an at-a-glance overview of key alert trends, helping you quickly understand the overall health of your team's environment.

    • Bulk Edit: A Bulk Edit button lets you perform actions on multiple alerts simultaneously, allowing you to quickly change their status and priority, assign them, or dismiss them in a single action.

    • View by alert <> View by asset: A toggle that allows you to group alerts per asset or see the flat list of alerts.

    Together, these features give you a consolidated and efficient way to prioritize and resolve critical issues, ensuring your BI environment runs smoothly.

    As you bring more of your analytics estate under Control Tower, a single problem asset can raise many alerts across multiple monitors. One stale Power BI report can fill the list with near-duplicate rows, burying the signal even when the number of real problems is small. To keep triage focused on what to fix first, the Alerts tab offers two views, toggled at the top of the table:

    • View by alert: the classic table with one row per alert.

    • View by asset: alerts grouped by the asset they affect, so a problem asset shows as a single row instead of many.

    View by asset reframes the list around the asset, not the symptom. Each asset row shows its monitor categories, its monitor count, and its top priority. Open any asset row to drill into every alert raised against it. Your selected view and the open asset are saved in the page URL, so a grouped view can be shared or bookmarked. Search, filters, sorting, and pagination work the same in both views, across open and resolved alerts.

    Staleness and unused-asset monitors now show how long a condition has persisted, using 30 / 60 / 90 timeframe badges. A colored (green, yellow, red) badge means the condition is breached at that window; a grey badge means it is not. A stale report raises one alert that tells you at a glance whether it has been stale for 30, 60, or 90 days, instead of a stream of near-duplicate alerts. The badges appear in the alerts table and in the alert drill-down.

    Effective alert management is a cornerstone of maintaining a healthy and reliable BI environment while fostering efficient team collaboration. By updating alerts, you actively manage the lifecycle of issues, which directly leads to:

    • Improved BI health: As you track an alert's status from "to do" to "resolved," you ensure that issues - like a failed dataset refresh or an underperforming report - are fixed. This proactive approach helps you minimize downtime and keep your data accurate.

    • Streamlined teamwork: Updating an alert gives your team a single source of truth. Everyone can see who's responsible for an issue, if it's being worked on, or if it's already been resolved. This transparency prevents people from doing the same work and keeps your team aligned.

    • Effective prioritization: You can change an alert's priority as a problem becomes more or less critical. This helps your team focus their energy on the most important issues, reducing disruption to your end-users and the business.

    You have two options for updating alerts:

    1. Individual Update: To change a single alert, go to its dedicated Alert Details page.

    2. Bulk Edit: To update the status, assignee, or priority for multiple alerts at once, use the Bulk Edit feature in the alerts table.

    Where to find your alerts

    monitor

    Two ways to view alerts

    Timeframe badges (30 / 60 / 90 days)

    Updating alerts

  • High downstream impact

  • Low usage (high cleanup ROI)

  • Before changing a dataset:

    • Check downstream assets

    • Understand how many reports will break

      • See if there is any activity on the reports

      • Look at the health signals of the report

    • Start a to notify the owners and other stakeholders of the dataset and report.

    Go to Inventory and filter on unhealthy assets. Specifically, look for:

    • Unused reports built on active models

    • Models with no downstream usage

    Then:

    • Start a workflow to notify the owners and other stakeholders of the dataset and report.

    • Archive or delete safely

    If a report is broken:

    • Trace upstream dependencies

    • Identify whether the issue originated in the BI tool or further upstream

    Use Case: Impact Analysis

    Use Case: Cleanup & Cost Reduction

    Use Case: Root Cause Analysis

    for quick hand-offs and spreadsheets.
    • Monitor list in Settings for quick enable/disable and housekeeping.

    • Select all projects/workspaces/streams to run checks at estate scale.


    BI Similarity (Phase 1: Power BI)

    • Similarity Dashboard to spot clusters of near-duplicate reports/datasets.

    • “Accepted” status so teams can acknowledge intentional overlap and reduce noise.

    Tableau support is on the roadmap—ask us about the preview.

    Performance & reliability

    • Leaner back-end processing for faster inventory builds.

    • Stability upgrades across Airflow/MWAA jobs (with smarter intermediate file handling).

    • Faster alert pages with cleaner navigation and more accurate counts.

    Connectors & metadata

    • Power BI & Tableau: richer inventory attributes and new search views.

    • Entra ID (Azure AD): pipeline stability fixes.

    • Qlik Sense & NPrinting: improved user/roles extraction reliability.


    • Fixed alert page glitches and the Back button on alert details.

    • Corrected alerts_count in Inventory; missing alerts now surface properly.

    • Polished radio button styles and various UI inconsistencies.

    • Fixed connector edge cases: Connector Details no longer errors during runs.

    What’s new

    Inventory, search & asset health

    Monitoring

    Teams

    Improvements

    Bug fixes (highlights)

    BI Similarity Cluster Map

    This feature is currently in preview and only available for Power BI

    Overview

    The BI Similarity Cluster Map helps you quickly find similar BI assets. It's an interactive map that groups similar reports and datasets together, letting you use filters to easily explore and pinpoint the exact clusters you're looking for.

    How to find clusters of similar assets

    1. Go to your preferred team.

    2. Click on the BI Similarity tab.

    3. Click on the type of asset you are interested in. You can choose between the following asset types:

      • Power BI Semantic Models

      • Power BI Reports

      • Tableau Data Sources

      • Tableau Dashboards

    4. Review the asset clusters.

    The graph shows all available similar asset clusters through edges and nodes.

    Each node represents an asset (report or dataset). The color of the node represents the location of the asset, for example a Power BI workspace or a Tableau project. Selecting a node marks the node with a dotted line. Nodes outside of the selected cluster are blurred.

    Each edge represents a relationship between two similar assets. The edge also has a similarity score and a state.

    A toolbar at the bottom of the cluster map controls how the graph is displayed:

    • Labels: Show or hide the asset names on the nodes.

    • Score: Show or hide the similarity scores on the connections between nodes.

    • Legend: Show or hide the legend. Use the dropdown next to it to pick the property that colors the nodes, such as workspaces.

    • Top Views %: Narrow the map to the most viewed assets. Lower the percentage to focus on the assets users actually open.

    Use the + and - buttons to zoom in and out, the arrow controls to pan across the map, and the center button to reset the view.

    The graph initially shows all similar asset clusters. When dealing with a large volume of assets, simply use the filters to refine your view and quickly pinpoint what you're looking for. The filters will change depending on the asset type that you have selected in the previous step.

    The following filters are available:

    • By Similarity Score: Choose the degree of similarity you are interested in. You can show pairs that score at least 70%, 80%, or 90%.

    • Search Datasets: Use the search to find dataset titles that contain your key words.

    • Dataset Owner: Search for datasets created by one or many owners.

    • Source: Search for datasets with the selected common source.

    Concepts

    The core building blocks you will see everywhere in Datalogz Control Tower.

    Assets

    An asset is any resource in your BI environment: reports, dashboards, datasets and semantic models, dataflows, workbooks, apps, and more. Control Tower keeps a unified inventory of every asset across all your connected BI platforms, enriched with ownership, usage, lineage, and health information.

    What you do: browse the inventory to see what exists, who owns it, and how it is used. Star the assets you care about, save filtered views for your team, and export lists when you need them.

    Platform Context

    Every BI tool organizes content differently: Power BI uses workspaces, Tableau uses projects, Qlik Sense uses streams. Platform Context is the single term Control Tower uses for all of these, so you can work consistently across tools without translating each platform's vocabulary.

    Connectors

    A connector links Control Tower to one of your BI platforms, such as Power BI, Tableau, or Qlik Sense. Using credentials you provide, it reads metadata from that platform on a schedule, so your inventory, monitors, and alerts stay current.

    Datalogz only reads metadata: titles, descriptions, configuration, lineage, usage patterns, refresh durations, and governance attributes. It never queries or accesses the data inside your reports. This can be described as read-only access to metadata only.

    What you do: an admin sets up each connector once and keeps credentials current. Syncing happens automatically from there. Read more in Datalogz Security.

    Monitors

    A monitor is a continuous check on your BI environment. Each monitor watches for a specific condition, such as a stale dataset, an unused report, or an unusual access pattern, and is tagged with the pillar it protects and a recommended fix. Default monitors are curated by Datalogz and work out of the box. My Monitors are your own: duplicate a default monitor and tailor its criteria to your organization's needs.

    What you do: enable the monitors you need from the Monitor Catalog, set who gets notified, and adjust schedules if needed.

    An alert is created when an asset breaches a monitor's rule. Each alert tells you the affected asset, what went wrong, who owns it, and what to do about it. Alerts have a status (to do, in progress, resolved) and a priority, and every change is recorded in an audit trail.

    What you do: triage alerts from the Alerts page: assign them to team members, set priority, comment, and resolve. Bulk actions let you handle many alerts at once, and alerts close automatically when the underlying issue no longer exists.

    A team groups people who work with the same BI content, typically by department or function. Teams scope which connectors, views, and alerts members see, so everyone works on the content they are responsible for.

    What you do: organize users into teams so access stays clean and alerts route to the people who own the affected content.

    The Home dashboard is your team's daily starting point. It summarizes alerts by pillar, priority, and status, with a view of everything or just the items assigned to you.

    What you do: check Home to see what needs attention today and jump straight into triage.

    BI360 is the executive view of your entire analytics estate: inventory growth, adoption and engagement, license utilization, department health, and trends over time, across all connected BI tools.

    What you do: use BI360 to track the health of your analytics estate over time and report progress to leadership.

    Understanding the Lineage View

    Dependency Lineage helps you:

    • Understand how assets are connected

    • Analyze impact before making changes

    • Identify cleanup opportunities

    • Improve governance and trust

    It turns Inventory from a static catalog into a dynamic system of relationships. Here is how you interpret the lineage view.

    These are the inputs to your asset.

    Examples:

    • Semantic models powering a report

    • Dataflows feeding a dataset

    • Source systems behind a model

    If empty: “No upstream assets found” means the asset is either:

    • A top-level source

    • Or lineage is not available from the BI tool

    These are the outputs that depend on your asset.

    Examples:

    • Reports built on a semantic model

    • Dashboards using reports

    • Other models or derived assets

    This section is shown as a table with rich metadata, including:

    • Asset name & type

    • Owner

    • Last modifier

    • Health status (e.g., Stale, Unused)

    The Actions section allows you to easily:

    • Learn more about the dependency in the Control Tower Lineage

    • Go to the asset in its source tool, like Power BI or Tableau

    • The number next to each section shows how many assets are connected

    • Helps quickly assess impact size

    You’ll see tags like:

    • Unused

    • Stale

    These come from and help you understand:

    • Whether dependencies are still relevant

    • Where cleanup opportunities exist

    Each downstream asset includes:

    • Owner

    • Last modifier

    Use this to:

    • Contact stakeholders

    • Validate whether something can be changed or removed

    2.12

    This release delivers a rebuilt Tableau connector with full multi-host and multi-site support, expanded asset mapping workflows in User Directory for Power BI and Tableau, and significant improvements to BI360 department-level reporting. This release also broadens Power BI inventory with capacity, domain, gateway, and usage analytics, extends Sigma with lineage, and includes performance improvements across alerts, monitoring, and BI Similarity.

    What's New

    • Tableau Multi-Site Support: You can now connect multiple Tableau hosts and sites within a single connector setup. Site discovery, per-site authentication, and per-site management are all handled from one place and if a sync partially fails, you'll see exactly which site had the issue and where it came from.

    • Asset Mapping for Power BI and Tableau: Administrators can now upload a mapping file to associate Power BI and Tableau assets with departments or custom groups. Once uploaded, Datalogz handles the sync automatically, and you can track status, re-sync on demand, or update the file at any time.

    • BI360 Department Health: BI360 now shows health snapshots for each department, including which are most active and which are at risk. You can drill into department ownership across all your BI tools, including Tableau, and see adoption broken down by connector.

    • Power BI Capacities: A new Capacities tab in Power BI inventory shows how workspaces, reports, and semantic models are distributed across your capacity. Datasource cards now include connection details and gateway health so you can quickly spot configuration issues.

    • Sigma Lineage: Lineage is now available for Sigma, covering workbooks, reports, and data models, including connections back to underlying data sources.

    • Tableau Inventory: Tableau assets now show host, site, and owner information, making it easier to understand where assets live in large multi-site environments. Dashboards, worksheets, and stories appear as distinct asset types, and team scoping can now filter by host and site.

    • BI360: The global inventory now includes Pillars, and Cost Management links have been updated to reflect pillar-based alerting. BI360 views are better scoped to the connectors your organization actually uses.

    • Power BI Domains and Usage: Workspace domain information is now surfaced in inventory with filtering support. Report usage analytics are available so you can see which reports are being used and by whom.

    • Alert and monitor breakdowns load faster thanks to smarter caching. Caches update automatically when you change monitor settings or workflows, so you're always seeing current data.

    • BI Similarity graphs render more reliably and cancel cleanly when navigating away.

    • Fixed a Power BI issue with domain parsing that affected workspace filtering.

    • Fixed pagination in Sigma workspace and member lists.

    Lineage

    The Dependency Lineage in Inventory shows how BI assets are connected.

    It answers:

    • What does this asset depend on? (upstream)

    • What depends on this asset? (downstream)

    This gives you a complete view of data flow, from source → model → report → dashboard.

    With Dependency Lineage, Datalogz has introduced the first steps towards operational lineage, which is a feature on the roadmap for later this year.

    Why Dependency Lineage Matters

    Without lineage:

    • You can’t see impact before making changes

    • Broken reports are hard to trace

    • Cleanup is risky

    With lineage, you can:

    • Understand BI dependencies instantly

    • Identify high-impact assets

    • Safely modify or delete content

    • Detect redundant or unused chains

    Lineage is foundational for governance and cleanup.

    1. Open Inventory

    2. Select any asset (report, dashboard, semantic model)

    3. Navigate to the Lineage tab

    Datalogz MCP Servers

    The Datalogz MCP servers allow you to ask your AI assistant a question about your analytics estate and get the governed answer back in plain language, without anyone opening the app.

    Datalogz Control Tower already knows what exists across every connected platform: which assets are there, who owns them, what is used, what is duplicated, what is failing, and what breaks if you change it. The Control Tower MCP server exposes that same picture as a set of tools any Model Context Protocol client can call. Ask "which Power BI reports has nobody opened in 90 days?" or "who can reach the Finance workspace?" and your assistant queries Control Tower directly, then answers from the result.

    Availability

    • Available in production:

      • MCP Server for Analytics Ops teams (Claude)

      • MCP Server for (Copilot)

      • MCP Server for Databricks Genie (One and Code)

    • Available in preview:

      • MCP Server for Business Users (Claude)

      • MCP Server for Business Users (Copilot)

    The MCP server is a read path over the same warehouse the app reads. Numbers reconcile with BI360, Inventory and Alerts, and are as fresh as your last connector scan. The server adds no lag of its own, and does no scanning itself.

    Most responses include a detail_url pointing at the asset in app.datalogz.io, so an answer in chat stays one click from the full asset page. When you want to act on what you found, whether that is assigning the alert, notifying the owner or running the workflow, you do it in the app.

    Next steps

    • Review

    Concept details

    Concept details opens as a side panel from the scorecard, from a search, or from a direct link on the Metric Explorer tab. The header shows the concept name, its status, and how many departments, definitions and data models it spans.

    The panel has two views: Definitions and Lineage.

    Definitions

    The Reference definition card is shown first: its department, metric name, expression, a Certified tag if its semantic model is endorsed, and a link to the data model with its report count.

    Every other metric in the concept follows as a card with:

    • the department and metric name

    • its label (Identical, Equivalent, Divergent or Conflicting)

    • how structurally similar it is to the source definition, as a percentage

    • its expression, with the lines that differ from the source definition highlighted

    • a link to its data model in Inventory, and the number of reports that use it

    Metrics that share the same definition are grouped together.

    To compare a definition with the source definition:

    1. Click Show expanded expression to see the expression with every referenced metric written out in full. Two metrics that look different on the surface often turn out to call the same base metrics, and the reverse happens too.

    2. Click Compare with source to open a side-by-side diff of the expanded source definition and the selected metric.

    3. Click the data model name to open the semantic model in Inventory and find its owner.

    Use Sort metrics by to order the cards by Structural similarity (least similar first), Department or Workspace. Large concepts load in pages; click Load more metrics to see the rest.

    The Lineage view draws the concept as a graph: the data model and table each definition lives in, the metric itself, and the reports, visuals and dashboards that use it. Other definitions of the concept appear as dashed nodes, colored by status, so you can see which branch of the estate runs on a different version of the metric. Click a data model or report to open it in Inventory, or a metric to open it in the Metrics Catalog.

    Click Why this answer? to see how the concept was formed. The formation audit lists every candidate definition Control Tower considered, ranked by combined similarity, with the departments and metrics behind each one. A dashed line marks the membership threshold: candidates above it joined the concept, and candidates below it are shown struck through with the reason they were left out.

    This is useful when a metric you expected is missing from a concept, or when a concept contains something you did not expect.

    Set up department insights

    Department insights slice BI 360 by team, function, or business unit (for example Marketing, Finance, Sales, or R&D), so you see adoption, license use, and content ownership per department instead of only tenant-wide.

    Once department data is connected, BI 360 adds:

    • Department User Breakdown: adoption and activity per team.

    • License Utilization by Department: allocated vs. active licenses per team.

    • Department Dashboard Ownership: content ownership and inactivity per team.

    • Department BI Health Snapshot: top active and at-risk departments on the Executive Summary.

    Datalogz joins the department field on each user account in Entra ID to the users, owners, and licenses it ingests from your BI tools.

    1. Confirm Entra ID is configured for your tenant.

    2. Go to Settings > User Directory.

    3. Set up the Entra ID connector (see the Entra ID guide).

    4. Department dimensions appear in BI 360 within one ingestion cycle.

    1. Go to Settings > User Directory.

    2. Choose which tools (Power BI or Tableau) you want to map assets to departments for.

    3. Create a CSV or Excel file with the columns asset_name, asset_id, and department. You can rename department to the language you use, for example Business Units.

    4. Upload the file on the Asset Mapping card and click Sync.

    Inventory Summary

    The Summary tab is where you start in Inventory. An estate with thousands of assets and hundreds of open findings does not tell you what to do first. Summary does, by narrowing the whole estate to four questions you can act on today: how healthy is it, what changed, what do people actually use, and what am I watching.

    Everything on the page is a jump-off point. Each tile, count, and asset links through to the filtered Assets grid or straight to an asset page.

    What Summary shows

    • Estate health at a glance. Ratio tiles for asset health and activity, each showing a healthy/unhealthy or active/inactive split with counts, scoped to the connector and team selected in the left nav.

    • Change detection. The Start here panel lists what was created and updated in the last 30 days, with field-level detail on datasets: which tables, columns, and measures were added or modified, by whom, and when. This is where a renamed column surfaces in days rather than after it has quietly broken a downstream report for three weeks.

    • Orientation shortcuts. Top Reports ranks your most-viewed reports with viewer counts, and Favorite Assets groups your starred assets by type. Both carry Asset Health badges, so you can see immediately whether the things people rely on most are in good shape.

    Power BI example:

    Databricks example:

    2.7

    Improvements

    Expanded monitors across BI platforms

    • Tableau: Governance, Performance, and Cost monitors to track drift, load times, and spend.

    • Power BI: New Performance monitors to pinpoint slow workspaces and reports.

    • Qlik: Cost, Performance, and Security monitors for end-to-end oversight.

    BI Similarity upgrades

    • Improved comparison scoring for more accurate “look-alike” detection.

    • Additional Power BI metadata capture to enrich similarity analysis.

    • Breadcrumbs added across pages for better orientation (no redundant “Home”).

    • Consistent iconography via shared components.

    • Guardrails to prevent duplicate team and connector names.

    • Home page APIs: faster load and more stable summaries.

    • BI Similarity: reduced compute time and smoother navigation.

    • Inventory: noticeable speed-ups on large estates.

    • Fixed rare 404 on Insights when no executive teams are set up.

    • Corrected BI Similarity acceptance and upstream lineage edge cases.

    • Fixed layout issues when cloning monitors.

    Semantic Intelligence

    Semantic Intelligence finds every definition of a business metric across your analytics estate, groups the ones that describe the same idea into a business concept, and shows where those definitions agree and where they have started to drift or even conflict.

    Most organizations do not have a maintained business glossary. The real definitions of Revenue, Customer or Headcount live inside measures and metric views, copied and adjusted by every team that needed them. Semantic Intelligence reads those metrics as they are, so there is no ontology or glossary to author before you start. It works bottom-up from what your teams already built.

    What's inside

    • Metric Explorer: an estate-level view with key figures and a standardization scorecard, one row per business concept. Concept details: every definition of one concept side by side, compared against its source definition, with a lineage view down to the reports that use it.

    • Metrics Catalog: every metric that was analyzed, searchable and filterable, with its expression and the concept it belongs to.

    • Exclusions: control which semantic models are left out of the analysis, for example test or personal copies.

    Global Inventory

    The Global Inventory is the single list of every BI asset across all your connected tools: reports, dashboards, datasets, models, apps, and folders, no matter where they were created. For each asset you see where it lives, who owns it, and whether it is healthy.

    What you use it for:

    • Eliminate blind spots across BI tools.

    • Identify unused, stale, or orphaned assets.

    • Improve governance, ownership, and accountability.

    • Support cost and license optimization.

    • Build a trusted foundation for cleanup and optimization initiatives.

    Metrics Catalog

    The Metrics Catalog lists every metric Semantic Intelligence analyzed for the selected connector and team.

    Column
    Description

    Measure

    The metric name.

    Type

    The kind of metric: for example "measure" or "calculated column".

    Department

    Department of the semantic model.

    Click a row to open the metric's detail panel, with its type, department, data model, table, business concept, the expression as written and the expanded expression.

    You can also reach Semantic Intelligence from : on a semantic model or similar asset page, the Data Attributes tab has an Open in Semantic Intelligence link.

    Datalogz Architecture

    Datalogz connects to BI tools exclusively via their authenticated REST APIs, ensuring secure and controlled access. The key points are:

    • Read-Only Metadata Access: We only retrieve metadata—such as report configurations, usage statistics, and asset lineage—without accessing any underlying report data or user content. This guarantees data privacy and limits access scope.

    • Authenticated API Calls: All API requests use credentials provisioned and managed securely through service principals or managed identities, ensuring only authorized access to metadata endpoints.

    • Encryption in Transit: All communication between Datalogz and BI tools occurs over secure HTTPS connections, protecting metadata from interception or tampering during transmission.

    • Metadata Storage Location: All metadata collected from BI tools is securely stored within a dedicated Datalogz AWS account to ensure isolation and control.

    2026.10.0

    Release date: October 14, 2026

    This release is about going deeper on every platform you connect. Databricks gains a Users tab, workspace access and lineage, BI Similarity now covers Sigma workbooks and data models, and Power BI dataflows appear in lineage. Semantic Intelligence also reaches the MCP server, so AI agents can ask what a measure means and who computes it differently.

    This release helps your teams to:

    • See who can reach each Databricks workspace and how data moves through Unity Catalog

    • Find rebuilt Sigma workbooks and data models next to the rest of their duplicates

    2.2.0

    Release date: December 2, 2024

    This release emphasizes connector improvements and Power BI refactoring, targeting enhanced functionality and performance, particularly for PBI. These platform enhancements align with our strategic goals to improve connector management, boost user engagement through superior UX, fortify system security, and ensure scalable technical performance.

    • Streamlined Connector Setup and Management:

      • Connecotrs now have more detailed informationabout credentials, connection status, and authentication methods used for each data source. This provides better visibility and troubleshooting capabilities for administrators.

    Asset Health

    Asset Health is a status applied to each asset - Healthy, Unhealthy, or N/A - so teams can quickly triage issues, prioritize fixes, and confidently use or share trusted content. Health is determined by active, (e.g., refresh failures, staleness, orphaned ownership, similarity matches).

    • Healthy: No active alerts, and relevant monitors are running for this asset type.

    • Unhealthy: One or more active alerts and/or confirmed similarity/duplicate matches.

    • N/A (No label): Monitors governing this asset type are turned off in the Monitor Catalog, so health can’t be assessed.

    Compare Similar Assets

    This feature is currently in preview and only available for Power BI

    Datalogz' Control Tower provides the essential tools for a thorough comparison of similar assets. Once you see the overlaps, you can make informed decisions about their future. For example:

    • If both assets serve a unique purpose, simply Accept their similarity.

    • If it's safe to deprecate one of the assets, choose the best version and archive the redundant one.

    • If both assets are similar, but can be consolidated, merge both assets to create a single, unified source.

    The dedicated comparison interface facilitates informed decision-making and streamlines stakeholder outreach for efficient resolution.

    Viewing workflow history

    Each workflow has a history view listing every session that has been run, including when it ran, who triggered it, and the outcome of each step. Access this from Settings → Workflows → Definitions, then open the workflow.

    My Monitors

    My Monitors are user-created monitors. Currently, users can only create new monitors by duplicating an existing Default Monitor and modifying it according to their needs. My Monitors provide users the flexibility to adjust the monitoring criteria, such as SQL queries and thresholds, to fit their specific requirements.

    • Duplicating Default Monitors: Users can create My Monitors by duplicating an existing Default Monitor. This duplication feature allows users to build upon the existing structure of the default SQL queries and modify them according to their specific needs.

    • Customizable Queries: Once duplicated, users can modify the SQL query, thresholds, and alert criteria of the monitor. This enables users to tailor the monitor to focus on specific assets, custom data conditions, or unique business requirements that are not covered by the default configuration.

    Alerts

    Teams

    Home dashboard

    BI360

    Sigma: Personal document display and naming have been improved for a cleaner inventory experience.

    Enhancements

    Platform Stability & Performance

    Bug Fixes

    Where to Find Lineage

    Lineage

    Why this answer?

    Set up via Entra ID (automated)

    Set up via a mapping file (manual)

    Without Entra ID or a mapping file, the rest of BI 360 works as normal. The department breakdowns are simply hidden from the Organizational, Data and Reporting tabs and from the Executive Summary.

    UX improvements

    Performance

    Bug fixes (highlights)

    Semantic Intelligence is in public preview. Request your access through your Customer Success Manager.

    Full Control: Users have full control over their My Monitors, including the ability to edit the monitor title, assign it to specific teams, and customize alert priorities or resolutions.

    Overview

    How does it work?

    workflow

    Data model

    The semantic model the metric lives in.

    Table

    The table the metric is defined on.

    Business concept

    The concept the metric was grouped into.

    Inventory

    Top Clusters %: Limit the map to the top clusters. Lower the percentage to focus on the largest or most similar clusters first.

    Created Between: Show all datasets that were created between the two selected dates. Quick picks cover the last week, last 30 days, and last 6 months.

    • By Similarity Score: Choose the degree of similarity you are interested in. You can show pairs that score at least 70%, 80%, or 90%.

    • Search Reports: Use the search to find report titles that contain your key words.

    • Report Owner: Search for reports created by one or many owners.

    • Source: Search for reports with the selected common source.

    • Created Between: Show all reports that were created between the two selected dates. Quick picks cover the last week, last 30 days, and last 6 months.

    • Report Type: Show paginated (.rdl) or regular (.pbix) reports or all reports.

    • Used in an app: Select to only show reports that are used in an app.

    What do I see in the graph

    Graph controls

    How do I find the cluster I'm interested in

    Upstream Assets

    Downstream Assets

    Actions

    Interpreting Key Signals in Lineage

    1. Dependency Count

    2. Health Indicators

    3. Ownership

    monitoring

    Global Inventory is built for breadth. For a deep dive into a single asset, with lineage, usage analytics, and alerts, use your team's Inventory.

    How it fits with the rest of Control Tower

    Analytics Ops teams
    security
    Connecting to an MCP server
    Trace Power BI reports back through the dataflows that feed them

    Databricks inventory now shows who has access and how data moves, not only what exists.

    • A Users tab for Unity Catalog principals, with removed principals hidden

    • An Access column on workspaces, and only the Genie workspaces Datalogz can reach are listed

    • Lineage captured as connections between assets, with first seen and last seen dates

    • Choose your Databricks cloud during connector setup, so workspace links open in the right place

    Result: Who can reach a workspace, and what depends on a table, are answered from the same inventory.

    Sigma joins Power BI, Tableau and SharePoint in BI Similarity.

    • Workbook to workbook comparison

    • Data model similarity

    Result: A Sigma workbook rebuilt from another one shows up in the same place as every other duplicate.

    • Dataflows now appear in inventory and in lineage

    Result: You can follow a report back through the dataflows that feed it, instead of stopping at the semantic model.

    Available to customers on request while we finish the experience.

    • Users with access to a connector can now open Semantic Intelligence; the Exclusions tab stays limited to connector managers

    • The MCP server can now answer definition questions: what a measure means, where it is defined, which teams compute it differently, and its lineage

    • Semantic Intelligence tabs now match the layout of Inventory

    • Unsaved changes: leaving a page with unsaved edits now asks first and offers to save

    • Consistent navigation: detail pages share one back link and the same margins

    • Top Team Reports: the Inventory Summary panel has a chart view

    • Tableau Webpage URL: workbook and datasource side panels link straight to the asset in Tableau

    • Power BI Inventory: the full gateway ID is shown with a copy button, plus accessibility and wording fixes from a UI review

    • Power BI processing on large tenants is faster and more reliable, after a sweep of query plans, timeouts and indexes

    • Databricks syncs stop early with a clear error when credentials expire, and keep retrying temporary errors

    • Sigma extraction handles very large workbooks without running out of memory and respects Sigma’s rate limits

    • Tableau managed and Edge connectors now share one processing path, and reprocessing a snapshot is safe

    • Tableau: embedded lineage and upstream table details were missing for some datasources, and content usage was incomplete on large sites

    • Tableau: some published datasources were classified incorrectly

    • Alerts: the active alert count could differ from the alerts in the list

    • Refresh Heatmap: schedules set in some Windows time zones appeared at the wrong hour

    • Databricks: workspace links assumed AWS for accounts on other clouds

    • Teams: a saved team description did not appear on the team details page

    • Inventory: datasource card tooltips opened behind the side panel

    What’s New

    Databricks: users, access and lineage

    BI Similarity for Sigma

    Power BI dataflow lineage

    In Preview

    Semantic Intelligence (available on request)

    Enhancements

    Platform Stability & Performance

    Bug Fixes

    Power BI Sync Refactor

    • Improved issue with running into rate limits when accessing Power BI connector. The new DAG implementation includes improved rate limiting and retry logic, significantly reducing API throttling issues and ensuring more reliable data collection.

  • Capacity data ingestion

    • Power BI capacity data collection has been enhanced to include detailed metrics on capacity instances, usage patterns, and resource allocation

    • New data on capacity overages help administrators proactively manage resources and prevent performance issues.

    • Visualization of capacity metrics is now available on the insights page

  • Sudo admin (Internal)

    • Sudo admin functionality is now fully compatible with v2 architecture

    • Enhanced UI safety features to prevent accidental resource creation in client environments

    • General UI bug fixes

      • Fixed logout functionality for sudo admins, enabling proper logout and login as regular users

    • Improved sudo admin email domain configuration

      • Added ability to manage sudo admin email domains through environment variables, extending sudo admin access beyond @datalogz.io domain

  • PBI Insights Page

    • Redesigned inventory and activity plots for better visualization of Power BI workspace usage and data refresh patterns

    • Added new interactive charts showing capacity utilization trends and peak usage periods

  • Metrics_2.2.0

    • Capacity data is now available. This include general inforation about the capacity instances and also data on overages

    • link to exisiting monitors: Datalogz Monitors

    Call out bugs and link/download to slack table at end or release

    The release includes two known customer-facing bugs and one internal issue:

    1. Backend Alembic Migration on Monitors (Patch 2.2.2): Affects customers only during upgrades.

    2. Capacity Data Extract/Copy Failure for Data Exceeding 16MB (Patch 2.2.2): Impacts customers using Power BI.

    3. Sudo/Admin Dropdown Not Displaying in Frontend (Patch 2.2.1): Internal issue with no customer impact.

    With this release the PBI tables have drastically changed and wilil be incompatible with prior data connectors. It’s required that old connectors be deleted and new ones created

    Overview

    New and Updated Features

    Metrics & Monitors

    Fixed Issues/Bugs

    Known Bugs and Limitations

    Breaking Changes

    When an asset is marked Unhealthy because of open alerts, decide whether to fix it (remediate issues to restore health) or archive it.

    To resolve the alerts, do the following:

    1. Open the unhealthy asset.

    2. Go to the Active Alerts tab to view current alerts

    3. Assign an owner or share the alert, and resolve the issues.

    Once all alerts are closed, the asset’s health automatically updates to Healthy.

    When an asset is marked Unhealthy due to similarity/duplication, choose one of three actions:

    1. Review matches: Open the asset’s Similar Assets tab; review the similarity score, compare usage, ownership, and freshness.

    2. Decide:

      • Accept similarity (keep both; mark as accepted).

      • Consolidate (select a canonical asset; redirect links and update ownership).

      • Archive (deprecate the duplicate per policy).

    3. Finalize: Notify stakeholders, close the similarity alert, and the asset’s health will update automatically.

    asset-based monitors

    What to do when an asset is Unhealthy

    What to do when there are similar assets

    1. In the Cluster Map, select a node that you are interested in. The graph will show you its similarity cluster.

    2. Click View Analysis to get details on the asset and other similar assets in the same cluster.

    1. Click View in BI Environment to open the asset directly in its source tool, like Power BI.

    2. Click Compare in the table with similar assets.

    3. Review similar parameters. Optionally, you can click the icon behind "Source" and "Target" to see the asset in its source tool.

    4. Click Keep Both if you decide the assets should co-exist.

    5. Click Notify Owners if you want the owners to receive the recommendation to archive the assets.

    Overview

    How to compare assets

    Setting up a workflow

    Use workflows to act on monitor alerts without manually deciding what to do each time. A workflow appears as a button on every alert that matches its filters. Configure it once, and anyone with access can run it from the alert page.

    How workflows work

    A workflow has three parts:

    • Scope: which alerts the workflow applies to. Today, workflows run on monitor alerts. Filters let you narrow scope by connector or by specific monitors; leave a filter empty to match all alerts.

    • Trigger: when the workflow runs. Manual workflows appear as a button on every alert that matches the workflow's filters. Clicking the button opens a dialog where the user fills in any required inputs before running.

    • Steps: what the workflow does. Each step runs a plugin. This release supports a single step using the Send Email plugin.

    • You need at least the Workflow Editor role.

    Follow the steps below to create and configure a workflow in Datalogz.

    1. Go to Settings → Workflows → Definitions.

    2. Click Create Workflow and configure the following:

    Field
    Description
    1. Create jobs for the workflow:

      1. Click the pencil to edit the job name.

      2. Select a .

      3. Click +Add Job to add another job.

    1. Save the workflow to make it live. It will immediately appear on any that matches the configured filters.

    Plugins are the actions a workflow executes. This release includes one:

    Sends a notification email about the alert. Recipients and message content are not fixed at configuration time. The person running the workflow chooses them when they click the button.

    Inputs at trigger time:

    • Recipient type: who receives the email:

      • User: a specific user in your account; the email goes to their registered address.

      • Team: all members of a team.

      • Static address: any email address, useful for external contacts such as on-call aliases or vendor contacts.

    What the email contains:

    The email includes the monitor name, asset, and connector associated with the alert, plus the comment. Emails sent to internal recipients (User or Team) also include a direct link back to the alert in Datalogz. Static external addresses receive the email without an app link.

    2026.09.0

    Release date: September 2, 2026

    This release is about trusting the numbers on the page. Inventory Summary now covers Qlik Sense, Sigma and Spotfire with a Start Here view that tells you where to look first, and SharePoint workbooks are compared against other workbooks so you can see where the same report has been rebuilt in a spreadsheet. The MCP server also moves onto our semantic layer, so AI agents can ask deeper questions and follow data lineage.

    What's New

    Inventory Summary for Qlik Sense, Sigma and Spotfire

    The summary experience that Power BI and Tableau already had now covers three more tools, with wording that matches each one.

    • A Summary tab for all three, with Asset Health and the tool's own activity measure: Active Streams for Qlik Sense, Active Workspaces for Sigma, Active Library Folders for Spotfire

    • A new Start Here section with Recently Created and Recently Updated tiles that deep-link into the exact rows they count

    • Favourites and Top Reports are paginated, with counts on each tab

    Result: Every card on the page is either a real number or an explicit statement that the number is not available.

    Spreadsheets are where governed reporting goes to be quietly rebuilt. This release compares SharePoint workbooks against each other.

    • SharePoint workbook to workbook comparison.

    • Workbooks are grouped into semantic clusters and given a classification, shown in the similarity grid.

    • Where a workbook fits more than one class, every class is shown and the primary one is styled more strongly.

    Result: You can see which parts of your governed estate have been copied into spreadsheets, and what kind of content those spreadsheets hold.

    The now runs on the same semantic layer the product uses, rather than its own set of narrow tools.

    • Agents query through a single semantic query interface instead of a long list of one-purpose inventory tools.

    • Lineage is available through that interface, replacing the previous per-asset downstream impact tools.

    • The cap on how much an agent could read back in one answer has been removed, so large questions no longer return truncated results.

    Result: An agent can follow a question across assets and lineage in one pass, and its answers stay consistent with what the product shows.

    Connect an AI client to the MCP server without manual setup

    • The OAuth server supports Dynamic Client Registration, so a compatible AI client can register itself.

    • Standard OpenID configuration discovery is published, so clients can find the endpoints themselves.

    • Self-registered clients are listed and distinguishable from clients you created by hand.

    Available to customers on request while we finish the experience.

    • Search across semantic concepts, with matches highlighted in the results

    • Lineage in the metric catalogue from dataset through to the report or dashboard, with every node in the graph linked into inventory

    • Cross-links between Semantic Intelligence, the inventory and the metric catalogue, in both directions

    • Volatile and low-value measures are filtered out of scoring, which improves accuracy

    • CC on alert notifications: alert emails can now copy additional recipients

    • Compact summary rows: the Summary panels use a tighter row density, consistent asset-type icons, and Start Here reads as a single section

    • Simplified roles: the role model has been consolidated. Existing access is preserved and no action is needed. End-user documentation for the new model is in progress

    • The home page no longer stalls on large tenants. Database calls in asynchronous request handlers were serialising every request through two event loops, which could push the page past 30 seconds; those calls plus an additional index have resolved it

    • Power BI activity extraction no longer fails on very large tenants, where a single activity file could exceed the 5 GB limit for a one-shot upload. Large files are now uploaded in parts

    • Power BI user records are de-duplicated correctly where activity data varies the casing of a user id, which was failing the daily activity merge

    • Spotfire membership filters no longer fail silently: a filter that cannot be honoured warns rather than dropping out of the query, and a metadata reflection failure leaves you with a usable view

    • Inventory: the Asset Health card over-counted on Tableau and Qlik Sense teams, in some cases reporting several thousand assets against a few hundred in the list

    • Inventory: asset tab counts ignored the applied filter on every tab except Reports

    • Inventory: Start Here disappeared entirely when it had nothing to show, instead of holding its place with an empty state

    • Spotfire: inventory showed duplicate assets, because the extractor combined two source schemas and the modelling layer dropped the information needed to de-duplicate them

    AI Readiness Assessment

    Before you point AI at your analytics, you need to know what it will inherit. Every copilot, agent, and AI-generated answer in your organization draws on the semantic models that exist right now: their definitions, their structure, and their drift. The AI Readiness Assessment in Datalogz Control Tower scores how ready your Power BI semantic models are for AI consumption, and shows you exactly what is changing in them, so you can fix trust problems at the source before they reach an AI-generated answer.

    Availability

    • Power BI: AI Readiness Assessment is available for Power BI semantic models (datasets).

    • Databricks: Coming soon

    How it works

    Datalogz continuously analyzes the semantic models your team owns and surfaces AI-exposure findings: conditions in a model that make its output harder for AI (or people) to trust. Each finding is raised as an alert, and every model receives a readiness status based on its open findings.

    A model's readiness feeds directly into its overall health. Every model carries one of three statuses:

    • Healthy: no open alerts of any kind. The model is AI-ready and passing all monitors.

    • Needs Attention: the model's only open alerts are AI Readiness findings. Nothing is broken today, but the model is not ready to be consumed by AI.

    • Unhealthy: the model has open alerts from monitors outside the AI Readiness Assessment, such as governance, cost, or performance monitors.

    This is the same status you see in the Inventory, and it is carried through consistently: a CSV export of your inventory reports the same health label as the app.

    The AI Readiness Summary gives your team a single view of readiness across its Power BI semantic models.

    • Readiness overview: how many of your team's models are AI-ready, and how many need attention.

    • Needs Attention: models with open findings link straight to the asset's open alerts and its place in the Team Inventory, so you can move from a readiness gap to the specific finding in one click.

    • Last synced: the timestamp reflects the end of the most recent successful analysis run covering your team, so you can always tell how fresh the assessment is.

    Model drift is one of the biggest hidden risks in AI adoption: a measure gets redefined, a column disappears, and every AI answer built on that model silently changes with it. The Recently Changed Models card surfaces this drift as it happens.

    For each recently changed model, the card shows:

    • What kind of change occurred: tables, columns, and measures that were added, removed, modified, or renamed between the model's consecutive snapshots.

    • The specific fields affected: each change line lists the actual object names and counts, with hover to see the full list.

    AI Readiness findings behave like any other alert in Control Tower, which means they come with a next action:

    • Alerts: open findings appear in Alerts under the AI Readiness category, with the usual workflow statuses, comments, and ownership.

    • Monitors: AI Readiness monitors are labeled with the AI Readiness type in the Monitor Catalog.

    • Workflows: run a remediation workflow directly from the alert, individually or in bulk across an asset's active alerts, so every finding is routed to the right owner and tracked to resolution.

    AI does not fix a broken analytics foundation. It amplifies it, and inherits every stale model, every silent schema change, every conflicting definition your estate has accumulated. The AI Readiness Assessment turns that risk into a scored, monitored, and actionable view: which models your AI can trust today, which ones need work, and what changed since you last looked.

    Security

    The Control Tower MCP server is read-only by construction. It reports on what already exists and creates nothing.

    Specifically, no tool on this server can:

    • Create, edit or delete assets in Control Tower or in your BI platform. Reports, dashboards, datasets and workspaces are never touched.

    • Create or change monitors. It can list monitors that already exist and when they were created. It cannot add one, edit its thresholds, or disable it.

    • Create, raise, suppress, assign or resolve alerts. It reads your alert history and your current queue. Alert state changes still happen in Alerts, by a person.

    • Trigger notifications or workflows. Nothing an agent asks will email an owner, post to Slack, or start a workflow.

    • Add, remove or modify users, groups, teams or permissions, in Control Tower or in the connected platform.

    • Add, reconfigure or remove connectors, or start a scan or a refresh.

    • Write anything back to a BI platform. The server never calls the Power BI, Tableau, Qlik, Sigma, Databricks or SharePoint APIs. It reads the warehouse Control Tower has already populated.

    Every tool in the Tool reference is marked read-only, and that is the whole surface. There is no privileged mode, no admin tool, and no parameter that flips a tool from reporting to writing. Action stays where accountability lives: in the app, with an owner, tracked to close.

    Your connectors, and only yours. Every query is scoped to the connectors the calling credential is entitled to, using the same permission model as the app. An agent cannot reach another account's estate, and cannot reach a connector your credential has no access to. Narrow further by passing an account_connector_key from list_connectors.

    Metadata, not report contents. The server returns asset names, types, owners, workspaces, refresh outcomes, view counts, viewer identities, access roles, similarity scores and lineage edges. It does not return the rows inside a dataset, the visuals on a page, or the query results of a report.

    Identifiable user data. Usage and access tools return names and email addresses, because that is the point of an access review. Treat a response the way you would treat an export from the app; the same handling rules apply. See Datalogz Security.

    Alert Workflows

    Alert workflows provide scripts directly within the Datalogz Alert details page to help you resolve issues quickly and efficiently. These pre-configured scripts allow you to take immediate action on a problem.

    How to use alert workflows

    To get started with an alert workflow, you'll first need to access the specific alert you want to work on and do the following:

    1. Select an action on the Alert details page.

    1. Click Copy or Run to use the script or click Download Full Script.

    2. Execute the script: Run the provided script in your BI environment.

    3. Validate that the action has been taken in the BI environment.

    4. Once confirmed, update the alert's status.

    When you change an alert's workflow status, you can add a comment explaining the decision. The comment is saved with the alert and the most recent one appears on the Alert Details tab, so anyone reviewing the alert later can see who changed what and why.

    1. On the Alert Details page, change the alert's status (for example from To Do to Resolved).

    2. Enter a comment in the confirmation dialog describing what you did or why.

    3. Click Save.

    To keep the alert queue focused on what is still live, Datalogz closes stale event-based alerts automatically. An EVENT alert with no new activity for 30 days is moved to Potentially Resolved. If the condition recurs, a new alert is raised, so nothing is lost. This keeps owners focused on active issues without manually clearing alerts that have quietly resolved themselves.

    Alert Details

    There are two ways to get details about a given alert. You can either click on an alert in the Alerts tab or you can click on the Alert button on the Active Alert tab for a given asset in Inventory. Both options opens the Alert Details page which provides the details of the alert. This page offers all the information needed to diagnose and resolve the problem, including:

    • Event Occurrence (only for Event based alerts): Shows when and how often the event that triggered the monitor occurred.

    • Tracking details: Details that help you track the alert and its lifecycle, including its status, priority and who the alert is assigned to. You can change tracking details on this page or in the Alerts tab via the Bulk Edit feature.

    • Summary

      • Alert Type: The type of alert, Asset based or Event based.

      • Monitor: The name of the monitor that triggered the alert, providing context for the rule that was violated.

      • Monitor Category: The kind of problem the monitor checks for, such as Governance, Performance, or Unused. Categories let you group and reason about alerts by problem type rather than by individual monitor names.

      • Timeframe (for staleness and unused-asset alerts): 30 / 60 / 90 badges that show how long the condition has persisted. A green badge means the condition is breached at that window; a grey badge means it is not.

    When you're ready to resolve an alert, you have a couple of options:

    • Resolve via : You can resolve an alert yourself by leveraging Datalogz's built-in alert workflows. These workflows provide you with scripts to resolve the issue in your BI environment.

    • Share with an external contact: If you need to involve someone who doesn't have access to Datalogz, such as an asset owner or a data engineer, you can share the alert's details with them via the Share button. This sends the alert details to an email address.

    Asset Details

    Each asset has a dedicated page showing its core metadata, active alerts, and (where relevant) similar assets, plus a clear Asset Health label so you can see at a glance whether it’s healthy, unhealthy, or not assessed.

    View an asset

    1. Use the Search bar or apply filters to locate your asset.

    2. Click the asset row to open its detail page with metadata, lineage, and health information.

    3. Export (optional):

      • Single asset: On the asset page, select Export to download a CSV.

      • Multiple assets: In the inventory table, select the checkboxes and choose Export to download a CSV of the selected items.

    Tip: Exports include the columns currently visible and respect your filters.

    Datalogz Control Tower shows the number of connected data sources and their details. To also see gateway details such as name and status, add the as an admin on each on-premises gateway you want to monitor.

    2.9.1

    What's new

    • Find your assets faster with the new regex Asset Filters to exclude assets from Team Inventory and Global Inventory.

    Bug fixes

    • Upstream lineage in BI Similarity is now showing correctly the source of a report.

    How Semantic Intelligence works

    runs in five steps for each connector.

    1. Read. Control Tower collects every metric from your semantic models (DAX measures and calculated columns, calculation fields, metric views, etc), with its name, table, data model, department, certification and usage. Excluded data models are skipped.

    2. Parse. Each expression is expanded (referenced metrics are written out in full) and parsed into a tool-agnostic logical tree. Formatting, variable names and equivalent ways of writing the same logic disappear at this step.

    3. Compare. Promising pairs of definitions are scored on four signals: Structure, meaning, linguistics, metadata.

    Bulk Edit Alerts

    With the Bulk Edit feature, you can quickly update multiple alerts at once, saving you significant time and effort. This is especially useful for managing a large volume of alerts or making a consistent change across several items.

    • You have at least a Datalogz User role.

    1. Filter your alerts: We recommend using the table filters to select the specific alerts you want to update. This ensures you're only making changes to the alerts you're interested in.

    2. Click Bulk Edit.

    Monitor Releases

    We’re excited to introduce several new Power BI monitors that help you better understand dataset behavior, reduce unnecessary costs, and ensure your users always have access to trustworthy, up-to-date data. These enhancements make it easier to spot inefficiencies and resolve issues before they impact your business.

    We’ve added three new monitors that identify reports with no user activity but long-running semantic model refreshes.

    Why this matters: Long refresh times on unused reports can drive up compute costs and slow down your analytics environment. These monitors help you quickly pinpoint where optimizations, reduced refresh frequency, or content retirement may be beneficial.

    This monitor flags reports that have recent user activity but whose underlying semantic model failed to refresh.

    Why this matters: Your users may be viewing stale or incomplete data without realizing it. This monitor helps you catch refresh failures early so you can restore data quality and maintain trust in your BI reporting. It also provides analytics that reveal where failures most often occur and highlight trends, enabling faster diagnosis and more proactive issue prevention.

    Default Monitors

    Default Monitors are out-of-the-box monitors created and owned by Datalogz. Default Monitors are pre-configured to help users quickly begin monitoring common and critical aspects of their BI environment. These monitors are set up with default SQL queries and thresholds based on industry best practices, allowing users to start receiving alerts and insights without any initial setup.

    • Pre-Built by Our Team: Default Monitors are developed and maintained by our team, designed to cover a wide range of use cases for managing BI environments. These monitors come preconfigured with SQL queries that evaluate common thresholds and criteria for data performance, security, usage, and compliance.

    • Ready to Use: Users can immediately begin using Default Monitors after setting up their BI environment. These monitors will automatically generate alerts based on predefined rules, requiring no further configuration from the user.

    What an agent can see

    Monitor Release December 2025

    Power BI Monitor: Inactive Reports with Long Refresh Durations (1–2 hours, 2–3 hours and more than 3 hours)

    Power BI Monitor: Reports with Failed Dataset Refresh (with active users)

  • Frontend deployments are now zero-downtime, and the production environment has completed its migration to ARM

  • Workflows: running a workflow with no workflow selected made the run button disappear

  • Saved views: a filter cleared inside a saved view could reappear after the grid refreshed, and clearing one filter chip could discard the others

  • SharePoint workbook similarity

    MCP server: deeper questions and lineage

    In Preview

    Semantic Intelligence (available on request)

    Enhancements

    Platform Stability & Performance

    Bug Fixes

    MCP server
    Create dependencies between jobs.

    Comment: a free-form message included in the email body alongside the alert details.

    Name & description

    What users see on the alert page when the workflow button appears.

    Trigger

    Set to Manual. Automatic and Scheduled triggers are visible but not yet enabled.

    Connector (filter)

    Limit the workflow to alerts from a specific connector, or leave blank to match any.

    Linked Monitors (filter)

    Limit the workflow to specific monitors, or leave blank to match all.

    Required Role

    How to create a workflow

    Plugins

    Send Email

    plugin
    alert

    The AI Readiness Summary

    Accepted findings are shared connector-wide. If another team accepted a finding on a shared connector, it counts here too, which is why accept counts can exceed the number of alerts your own team has handled.

    Recently Changed Models

    Change tracking begins when the assessment first runs, with an initial look-back window of 30 days by default. Cosmetic source-only edits that do not change the model's schema are not flagged.

    Acting on findings

    Why this matters

  • Asset details: Key details about the asset affected by the alert, including its type (e.g., Report, Dashboard, Dataset), name, and unique ID.

  • Connector: The specific data source or connector (e.g., Power BI, Tableau) from which Datalogz captured the alert.

  • Metadata: A detailed view of the metadata Datalogz has collected for the impacted asset. This information is crucial for understanding the state of the asset at the time of the alert.

  • How to resolve an alert

    workflow

    Power BI Semantic Model Gateway Permissions

    Service Principal
    Screenshot of a Power BI Report

    Archive

    The Archive section contains all release notes of releases 6+ months ago.

    2.8.1

    What's new

    • Improved Members Home page for faster navigation.

    Improvements

    • Asset pages have been inproved

      • The Alerts/Similarity tabs only show up when there are alerts and similar assets.

      • The Report and Semantic model (Power BI) asset pages have a link to Power BI.

    • Power BI Reports export: new Dataset column (upstream lineage).

    • Power BI Users: new Type field to label Service Principal vs User.

    • Global icon system applied app-wide.

    Add a comment when you change an alert's status

    A comment is optional, but a short note such as "Republished the dataset, refresh now succeeds" gives your team an audit trail and prevents duplicate work.

    Automatic status changes

    Group. Definitions that score high enough are grouped into a business concept, and a source definition is chosen for each concept. Each candidate must also be close enough to the source definition itself to stay in the concept; candidates that are not are split off and grouped again.

  • Classify. Every definition is labeled against the reference definition, and each concept gets its status.

  • Within each concept, Control Tower selects the metric that is most likely to be the trusted version. It favors:

    • metrics that other semantic models reference as their source

    • metrics in a certified (endorsed) semantic model

    • metrics used by more reports

    • metrics most similar to the rest of the concept

    Semantic Intelligence analyzes the latest metadata from your connector scans. Results are scoped to each team's workspaces, so two teams on the same connector each see their own concepts. While an analysis run is in progress, previous results stay visible until the new run is published.

    Semantic Intelligence

    How the reference definition is chosen

    When results update

    Select the specific alerts you want to update. You will see a count of your selected alerts in the bottom-left corner.

  • Make your changes: In the bulk edit panel, you can:

    • Change the alert's status.

    • Update its priority.

    • Assign it to a (different) user.

  • Review and save: After making your changes, a pop-up will show a summary of the updates. If everything looks correct, click Save Changes to apply them to all the selected alerts.

  • Required Role

    How to use Bulk Edit

    Fixed Configuration: Users cannot directly modify the SQL queries or thresholds of Default Monitors, ensuring that these monitors remain consistent and reliable as standard tools for all users.

    Overview

    How does it work?

    2026.08.0

    Release date: August 5, 2026

    This release is about the layer underneath your dashboards. SharePoint reaches general availability with full lineage, ownership, and sprawl monitoring; BI360 gains a Data tab that shows where your data actually comes from, how reliably it refreshes, and who is creating it; and the Datalogz MCP server enters preview, opening your governance metadata to AI agents.

    This release helps your teams to:

    • Govern SharePoint content in production the same way they govern BI, with lineage, ownership, and sprawl monitoring included

    • See their data sources, refresh reliability, and content creators in one place in BI360

    • Query their analytics estate from an AI agent through the MCP server, now in preview

    moves out of early access and into general availability. Content is inventoried, monitored, traced, and clickable, on the same footing as your BI connectors.

    • Clickable source URLs on every inventory asset tab, so you can jump from an asset to the live document

    • Lineage on the asset side panel, with parentage shown as "Belongs to" so you can see where a document sits in its site and library structure

    • Sprawl monitors for ownerless content and for stale or empty content, with a dedicated SharePoint tab in the Monitor Catalog

    • Full library crawling: every document library on a site is now crawled, not just the default "Documents" library

    Result: SharePoint sprawl gets the same ownership and staleness treatment as the rest of your estate, across all of your content, not a fraction of it.

    The Datalogz MCP server is available in preview, letting AI agents and assistants query your governance metadata directly.

    • Ask about inventory, ownership, lineage, usage, and alerts in natural language from any MCP-compatible client

    • Queries run against generated dbt models, so answers stay consistent with what you see in the product

    Result: Your governance data becomes something your team's AI tooling can reason over, not just something they read in a dashboard.

    now supports a user-supplied, pre-created Connected App alongside the existing setup flow.

    • Provide your own Connected App credentials during connector setup

    • Useful where security policy requires the app to be created and reviewed inside your own tenant

    Result: Tableau connects on your organization's terms, without a policy exception.

    • Alert stat cards now respect the filters applied to the table beneath them, so the numbers match what you are looking at

    • Alert scoping is unified across View by Alerts and View by Assets and the same filters produce the same population in both views

    • Long-refresh monitors only flag a duration when the refresh is still scheduled, removing noise from retired content

    • Customer-facing monitor descriptions have been cleaned up for clarity

    • Inventory Summary refreshes no longer deadlock. Large environments that previously saw 10+ hour refreshes now complete normally

    • MCP now queries through generated dbt models rather than hand-written SQL, making its results consistent with the rest of the platform and simpler to extend

    • Spotfire: asset views now return one row per GUID, unbreaking the inventory grid

    • Spotfire: source lineage is captured, and all owners are retained rather than only the first

    • Qlik: the Team and Inventory Summary tab is hidden for Qlik teams, fixing an empty-users redirect

    • SAML SSO: sign-in now succeeds with identity providers that send empty attributes

    Usage Analytics

    Usage metrics on Report asset pages and in the Report Inventory table show how each report is accessed and consumed: unique views, unique viewers, and downloads, over rolling 30, 60, and 90-day windows (or since the connector started ingesting, whichever is shorter).

    Currently, the following metrics are available:

    • Unique View Count The total number of distinct views of the report.

    • Unique Viewer Count The number of unique users who have viewed the report.

    • Download Count The number of times the report has been downloaded, when applicable.

    2.11

    This release expands the Datalogz control layer across more BI platforms, with a new connector, a major upgrade to BI Similarity, and richer executive and usage insights.

    We've expanded core parts of the platform to:

    • Bring a new BI tool — Sigma — into the Control Tower

    • Extend cross-tool similarity detection beyond Power BI

    • Give executives a clearer, department-aware view of BI performance

    2026.07.0

    Release date: July 6, 2026

    This release is about knowing what your AI will inherit. The new AI Readiness Assessment scores your Power BI semantic models and shows model drift as it happens, exports finally cover the full estate instead of 500 rows, and alerts turn into routed remediation without leaving the page.

    This release helps your teams to:

    • Know how AI-ready their Power BI semantic models are, and catch model drift before it becomes a trust problem

    • Export the full analytics estate in one pass instead of 500 rows at a time

    • Turn any alert into a routed, tracked remediation workflow on the spot

    2.4.0

    Release date: April 7th, 2025

    Release 2.4 focuses on deepening platform control, expanding monitoring capabilities, and laying the groundwork for scalable team-based functionality. Key improvements include backend support for team-specific data views, a centralized monitor summary dashboard, and enhancements to connector management—pushing forward our goal to deliver actionable, secure, and user-friendly BI operations.


    • Teams Backend Views:

      Implemented a new backend framework for generating filtered views based on platform_context_id, enabling precise data segregation and enhanced query performance. This improves team-level data access control and lays the groundwork for future team-based UI features.

    • Connector Settings Improvements

    Executive Summary

    The Executive Summary is a daily, auto-generated reading of your whole BI estate: activity, adoption, and efficiency across all connected BI tools, interpreted in plain language. It is read-only, built from the Global Inventory and BI 360 Insights, and shareable by link or as a PDF export.

    Required role: BI 360 Viewer.

    The top section gives an immediate status snapshot:

    • Overall BI health status (for example Stable or Declining)

    • Refresh success rate across all connectors

    Sign-in: plus-addressed email addresses are accepted

  • Similarity: credential refresh works again after a regression introduced in a prior hotfix

  • What's New

    SharePoint: now generally available

    MCP server: now in preview

    Bring your own Tableau Connected App

    Enhancements

    Clearer alerts

    Platform Stability & Performance

    Bug Fixes

    SharePoint
    Tableau authentication

    Help BI Ops teams spot unused and declining Power BI reports faster

    Sigma is now a first-class BI platform inside Datalogz.

    • Sigma assets are ingested into Datalogz and mapped into the common BI metadata model

    • Sigma dashboards, workbooks, and datasets show up in Global Inventory alongside Power BI, Tableau, and Qlik

    • Foundation in place for future Sigma activity tracking, monitors, similarity, and lineage

    Result: Customers running Sigma can now manage it inside the same Control Tower they use for the rest of their BI environment.

    The BI Similarity experience has been redesigned, and now supports Tableau (preview) in addition to Power BI.

    • Refreshed Cluster Map and similarity views for faster duplicate exploration and consolidation decisions

    • A new recommendation box that helps you decide what to do with similar reports or datasets

    • Tableau data sources scored for similarity using the same model as Power BI

    • Sets the foundation for cross-platform deduplication across Power BI and Tableau

    Result: Faster identification and cleanup of duplicate or overlapping reports.

    BI 360 now gives executives a deeper, department-aware view of their BI environment.

    • Department-level rollups for usage, adoption, cost, and risk so leaders can see performance by team

    • Expanded executive visualizations and a refreshed Executive Summary

    • New current vs. historical toggle to compare today against past performance

    • Connector-level rollups to see KPIs by BI platform

    Result: Clearer, more accountable executive visibility; leaders can see exactly which departments and tools are driving usage, cost, and risk.

    Power BI reports now have richer usage analytics inside Inventory.

    • Usage views across 30, 60, and 90-day rolling windows

    • Trend indicators in BI 360 showing whether usage is growing, declining, or flat

    • Easier identification of unused, low-value, or rapidly changing reports

    Result: BI Ops teams can prioritize cleanup, consolidation, and ownership decisions on Power BI reports with real evidence of how they're actually being used.

    We've continued evolving Inventory into the BI system of record.

    • Improved asset detail sections with a cleaner, more consistent layout

    • Inventory now covers Sigma assets in addition to existing platforms

    Result: A more complete, more usable single source of truth for BI assets across tools.

    Ongoing stability work to keep the platform fast and reliable as coverage expands.

    • Performance improvements across the platform

    • Reliability fixes carried in from the prior release

    • Code quality improvements supporting the new connector and similarity work

    Result: A faster, more stable platform as you scale Datalogz across more BI tools.

    Check out our updated docs to see Sigma setup, Tableau Similarity, and the new Power BI usage views in action.

    What's New

    Sigma Connector (Private Preview)

    BI Similarity — Redesigned, with Tableau Support (Private Preview)

    BI 360 with Department-Level Insights

    Usage Insights for Power BI Reports

    Enhancements

    Inventory Enhancements

    Platform Stability & Performance

    Before you point AI at your analytics, you need to know what it will inherit. The AI Readiness Assessment scores how ready your team's Power BI semantic models are for AI consumption.

    • A readiness summary page that scores your Power BI semantic models for AI consumption

    • Findings surface as a dedicated AI Readiness alert category, routed like any other alert

    • A Recently Changed Models card that shows exactly what changed in each model, with renames shown as old to new names rather than an add plus a remove

    • Field-level change detail: the specific tables, columns, and measures added, removed, or modified between snapshots

    Result: You see model drift the moment it happens, before it reaches an AI-generated answer.

    Inventory exports are no longer capped at 500 rows.

    • Exports now stream up to one million rows

    • Live progress while the export runs, with the option to cancel mid-download

    Result: Your full estate lands in a spreadsheet in one pass, not 500 rows at a time.

    Remediation now starts where the finding lives.

    • Trigger workflows directly from an alert's side panel or from an asset's inventory panel

    • Run them per alert, or in bulk across an asset's active alerts

    Result: Every finding turns into a routed, tracked action without leaving the page.

    • A new Migration monitor type shows correctly in the Monitor Catalog

    • Alert categories that previously fell into "Other" now bucket correctly

    • Redesigned alert emails: a clear per-alert card with key details, a "First seen" timestamp, and a direct "View alert" button

    • Better saved views: rename and re-share your saved Inventory views in place, set sort explicitly per column, and keep sort and filter state across reloads and shared links

    • Accessibility and visual refresh: a broad WCAG cleanup plus a calmer, more readable design across tables, the Home dashboard, navigation, and tooltips

    • Alerts can now be sorted by first-triggered and closed dates.

    • Power BI syncs now capture only what changed since the last run, cutting multi-hour syncs and reducing storage footprint by more than 90% in large environments, while keeping deletions accurately reflected.

    • Tableau metadata extraction self-tunes its paging on very large sites instead of failing, and several classes of intermittent sync errors have been eliminated.

    • The Power BI Capacities tab now shows only your team's capacities, and the header count matches the tab.

    • Cloning a monitor and viewing "My Monitors" no longer error.

    • Alert dialogs opened from shared deep links now load the full asset header instead of a blank title.

    What's New

    AI Readiness Assessment

    Full CSV exports

    Run workflows straight from alerts

    Enhancements

    Smarter monitors

    Platform Stability & Performance

    Bug Fixes

    (related to Teams view update):
    • Initiated support for connector deletion and better backend handling.

    • Added health status tracking for connectors.

    • Introduced a connector history log for auditing changes such as credential updates and toggle modifications.


    Monitors Summary Page:

    Released a centralized dashboard to track monitor alerts across categories (e.g., security, performance, governance).

    • Provides visual alert distribution by Pillar.

    • Enables filtering by date range and severity.

    • Supports trend analysis to help customers understand overall BI health at a glance.


    • Multiple Root Accounts issue is fixed (Now it’s possible to have multiple Root accounts)

    • Removing the Admin User leaves the Teams created by that User useless. That issue is fixed now by transferring the ownership to the user deleting the Admin User

    • Frontend Improvements.


    • Admins shouldn’t see the teams which they are not a part of, in the Teams Dropdown. Since they are admins, they should have an option to request to be a part of the team to Owner. [We can cover this in the upcoming releases]

    • All root users and the user who is creating the team should be a part of the team by default.


    • There are no breaking changes in this release

    1. Overview

    2. New and Updated Features

    3. Monitors

    4. Fixed Issues and Bugs

    5. Known Bugs and Limitations

    6. Breaking Changes

    Total assets and total users

  • Adoption rate: the share of your licensed user population active in the period

  • Active cost management risks

  • A change log compares the current period to the previous one. Each signal is labeled: Stable (held steady), Growing (increasing), Declining (decreasing, for example user adoption), Shrinking (inventory contracting), Reducing (risk items decreasing, a positive signal), or Improving (moving in the right direction).

    When department insights are set up, the summary also surfaces department-level BI health: the top 3 most active departments, the top 3 at-risk departments, and per-department alert counts, active assets, and adoption rates, with click-through to the Organizational tab filtered for that department.

    1. Sign in to Datalogz Control Tower and open BI 360. If you do not see it in the side panel, ask your admin for the BI 360 Viewer role.

    2. Scan the Executive Summary for what changed and where the at-risk areas are.

    3. Share it with leadership by copying the link or exporting to PDF.

    At a glance

    What changed since last period

    Department BI Health Snapshot

    The snapshot turns "BI is unhealthy somewhere" into "BI is unhealthy in Marketing and Finance". That is the difference between global awareness and a targeted intervention.

    What you do

    2.13 (2026.06.0)

    Release date: June 17, 2026

    This release puts more control in the hands of the people who run analytics. Inventory becomes personal and shareable with Custom Views, Shared Views, and Favorites. Alerts get sharper with 30/60/90 day timeframes and an asset-centric view. The Databricks connector arrives in preview, and immediately includes lineage.

    This release helps your teams to:

    • Work from their own saved slices of the analytics estate, and share them

    • Separate genuinely stale assets from recently active ones before acting

    • See risk rolled up by asset, not buried in a flat alert list

    Inventory now lets each user save and switch between their own views of the analytics estate.

    • A view picker with Edit Columns: reorder, rename, freeze, and add or remove columns

    • Save, switch, duplicate, rename, set a default, and delete views

    • Shareable links that survive navigation

    • Built-in system views: All Assets and Unhealthy

    Result: Every team works from the slice of the estate that matters to them, without rebuilding it on each visit.

    Custom Views can now be shared with a team.

    • Save a view as personal or shared with your team

    • Owner-or-admin management of shared views, with the ability to change visibility after creation

    Result: A team converges on one agreed view of the assets they own.

    Star the assets you care about and return to them fast.

    • A star column on the Assets grid and a My Favorites system view

    • Favorites work across Power BI, Tableau, Sigma, Qlik, Databricks, and SharePoint

    Result: Quick access to the handful of assets each owner watches most closely.

    Administrators can now configure single sign-on without a support ticket.

    • A self-service SAML SSO configuration screen, gated to the Sys Admin permission

    • Passwordless email login code flow

    • A config-driven announcement banner on the login screen

    • An accessibility overhaul and split-screen redesign of the sign-in experience

    Result: Faster, more secure onboarding that an administrator controls directly.

    Alerts and their underlying monitors can now be viewed across a window you choose.

    • Multi-window monitors run 30, 60, and 90 day timeframes for the Power BI stale and unused family: unused datasets, unused reports, orphaned reports, and high-refresh and Snowflake refresh datasets

    • A timeframe filter on the alerts list and drill-down tables, with 30/60/90 badges on alert rows and beside the Summary title

    Result: Owners separate genuinely stale assets from recently active ones instead of chasing a single fixed window.

    Roll alerts up by the asset they belong to.

    • A View by asset grouping with a server-side grid, category badges, and drill-down to the underlying alerts

    • Type and Owner column filters on the grouped view

    • Each monitor now carries a category, derived from its health tags and surfaced as a badge

    Result: Instead of a flat alert list, owners see which assets carry the most risk and act on the asset, not the individual alert.

    Databricks is now in preview. The connector includes:

    • A Lineage tab for Databricks asset types

    • Databricks Monitors that can be enabled in the Monitor Catalog

    Result: Upstream and downstream visibility for Databricks assets, with monitoring.

    Sigma becomes a first-class connector for monitoring and executive reporting, building on the Sigma connector and lineage shipped earlier.

    • Predefined Sigma monitors with RBAC, plus a Sigma tab in the Monitor Catalog

    • Sigma included in BI 360 reporting and owners-per-platform, the scheduled-refresh heatmap, and monitor status

    • Workbook pages metrics and report-owner attribution for Sigma

    Result: Sigma content is monitored and costed alongside every other tool.

    A broad set of Tableau improvements.

    • A Created Between date filter on the cluster map

    • Embedded datasources captured and surfaced, plus a Published vs Embedded datasources chart on the Data tab

    • Tableau content engagement on the Executive Summary and BI360 engagement metrics

    • Similar Assets for Tableau dashboards and datasources

    Result: Tableau reaches parity on engagement, similarity, and ownership analytics.

    • Add a comment when you change an alert's workflow status

    • The latest comment shows on the alert Details tab

    • Comments persist in all cases and status labels are normalized

    Result: An audit trail of who changed what and why, attached to the alert.

    • EVENT alerts with no recent activity auto-close as Potentially Resolved after 30 days

    • The event-occurrence chart window extends past the last-seen date for open alerts so the trend stays accurate

    Result: The alert queue reflects reality, and owners focus on what is still live.

    Building on department health, BI360 adds new ways to see who owns what.

    • A Reports by Department chart with a Hide Unattributed toggle

    • A Unique Owners metric and a Department Assets vs Unique Owners chart

    • Deleted user attribution for assets whose owner no longer exists

    Result: Clear accountability for analytics by department, including the gaps.

    • Semantic Model and Data Sources rows added to the Compare Similar Assets modal

    • Full table columns shown in the asset detail panel

    • Workbook pages information in the inventory workbook details panel

    Result: Richer side-by-side comparison and deeper single-asset detail.

    SharePoint content enters the inventory.

    • Sites, Drives, Files, and Workbooks inventory tabs

    • Workbook side-panel detail tabs for charts, pivots, and comments

    Result: SharePoint-hosted analytics stop being a blind spot in the estate.

    • BI Similarity sliders clarified: renamed to Top views and Top nodes, scoped to reports, and ranked by 30-day views

    • Duplicate formula monitor: a new predefined monitor that flags duplicate formulas, excluding trivial expressions and shared-data-model cases

    • Viewers CSV export lists Email first and mirrors the active view

    • Grid polish: clearer custom scrollbar, tighter row height, and sticky Edit Columns headers

    • The Top N% by views slider on the BI Similarity cluster map now filters server-side, for both correctness and speed.

    • Corrected an adoption aggregation that could produce over-100% rates; Power BI adoption now falls back gracefully when AAD is not connected.

    • Power BI personal workspaces are now excluded from organizational folder metrics.

    BI 360 Insights

    BI 360 Insights breaks your analytics estate down by layer: an Overview, plus dedicated tabs for the organizational layer (workspaces, projects, streams), the reporting layer (reports, dashboards, apps, workbooks), and the data layer (semantic models, datasets, data sources, dataflows).

    BI 360 Insights also include department-level breakdowns for organizations that have connected Entra ID. Department insights answer the question: which teams are driving usage, owning content, and consuming licenses, and which are not? Where Entra ID is connected, every relevant insight can be sliced by department.

    The Overview tab is the primary health dashboard: a fast, cross-tool snapshot via KPI cards and the BI Health chart.

    KPI summary cards. Four cards summarize the state of your BI environment, each broken down by BI tool:

    • Data: total data assets (semantic models, data sources, data connections, dataflows)

    Department asset-mapping inheritance with site, project, workbook, and view precedence

    What's New

    Custom Views

    Shared Views

    Inventory Favorites

    Self-service SSO and passwordless sign-in

    Alerts: 30/60/90 day timeframes

    Alerts: Group-by-assets view

    Databricks connector with lineage and monitors (Preview)

    Enhancements

    Sigma monitors and BI 360

    Tableau enhancements

    Alert workflow comments

    Auto-close stale alerts

    BI360 ownership analytics

    Asset comparison and detail

    SharePoint connector (Preview)

    Smaller enhancements

    Platform Stability & Performance

    Bug Fixes

    New to saved views? See Search and Filters to get the most out of Custom Views, Shared Views, and Favorites.

    Reporting: total reporting assets (reports, dashboards, workbooks, apps)
  • Organizational: total organizational units (workspaces, projects, streams)

  • User: total users registered across connected tools

  • BI Health chart. A Sankey flow maps asset categories (Reporting, Data, Organizational, User) to their health status (healthy or unhealthy) and the BI tool they belong to. Use it to spot which platform or asset category carries the highest share of unhealthy assets.

    Tracks the health of your BI hierarchy and user engagement within it: workspaces (Power BI), projects (Tableau), streams (Qlik Sense), and workbooks or folders (Sigma).

    KPI cards:

    • Active Folders: folders with recent activity as a share of all folders

    • Inactive Folders: folders with no recent activity, candidates for cleanup

    • Active Users: users who accessed BI content recently out of total users

    • Inactive Users: users with no recent BI activity, potential unused licenses

    Analysis. The left panel shows summary metrics; the Activity Trends chart plots folder activity over the last 30 days by tool. Key metrics: Activity Trends (% change vs. last 30 days), Total Top Level Folders, Folder Growth Rate, Folder Content Growth Rate, Adoption Rate (of the people you are paying for, how many actually get value), and User Engagement Score, which moves beyond "did they log in?" to "how deeply are they engaging?", distinguishing power users from passive consumers.

    Department insights (requires Entra ID): a sortable Department User Breakdown table with user counts and activity per department, and License Utilization by Department, color-coded by utilization band (red below 30%, amber 30 to 70%, green above 70%).

    Focuses on the health and engagement of reports, dashboards, and other content assets.

    KPI cards:

    • Active Assets: reporting assets with recent viewer activity out of all assets

    • Active Reports: reports accessed recently out of total reports

    • Active Dashboards: dashboards accessed recently out of total dashboards

    • Unique Report Viewers: distinct users who viewed any report during the period

    Analysis. The Viewer Trends chart plots unique daily viewers over time by tool. Key metrics: Viewer Trends (% change vs. last 30 days), Total Reports, and Reports Growth Rate.

    Department insights (requires Entra ID): Department Dashboard Ownership surfaces which departments own which dashboards and reports, and whether those assets are actively used, so cleanup work can be routed to the right team.

    Provides visibility into the health and reliability of your underlying data layer: semantic models, data connections, dataflows, and scheduled refreshes.

    KPI cards:

    • Successful Refreshes: refreshes that completed without error as a share of all refreshes

    • Failed Refreshes: refreshes that failed and need investigation to prevent stale reports

    • Active Data Assets: data assets in active use out of all registered data assets

    • New Data Assets: data assets added recently as a share of all assets

    Analysis. The Viewer Trends chart plots data asset usage over time. Key metrics: Viewer Trends (% change vs. last 30 days), Total Refreshes, Scheduled Refreshes, and Data Assets Growth Rate.

    Overview tab

    Organizational tab

    High inactive user counts are a strong signal for license optimization. Cross-reference with your BI tool's license data to identify recovery opportunities.

    Reporting tab

    A low Active Assets percentage alongside a high Total Reports count is a strong indicator of report sprawl. Use Global Inventory to investigate and identify stale content.

    Data tab

    Failed refresh rates directly impact report reliability. If Failed Refreshes is above 0%, investigate the affected assets in Global Inventory before escalating to your BI tool administrator.

    Tools Reference

    MCP tool reference

    The Control Tower MCP server gives your AI assistant access to Datalogz inventory, usage, similarity, health, and governance data. This page covers all 19 tools, grouped by the questions they help answer.

    Ask using natural language and your assistant selects the tools and supplies the inputs. The tool names below help you understand what it can retrieve. To get connected, see Connecting to an MCP Server.

    Before you start

    • Data freshness: Results reflect data already collected by Control Tower. BI metadata and activity are as fresh as the latest connector scan.

    • Read-only access: Tools retrieve information. Make changes, resolve alerts, and run workflows in Control Tower.

    • Account scope: The connection provides access to the authenticated account's connectors. MCP operates at connector level; it does not apply team or workspace restrictions.

    • Choosing a connector: Start with list_connectors. Inventory queries and tools prefixed with powerbi_ or tableau_ work with one connector at a time. If several are available, your assistant must pass the relevant account_connector_key.

    Lists the connectors available to the connection, including each connector's name, platform, active status, and asset count when available. It also returns the connector key used by other tools to select a data source.

    Example: “Which connectors can I query, and how many assets does each contain?”

    Shows what can be queried for one connector: available asset and record types, fields, allowed values, and relationships. It also provides query syntax and examples. Your assistant uses this before run_dsl_query to build a query that matches the connector's available data.

    Example: “What information can I query about our Tableau assets?”

    Searches, filters, counts, and retrieves records using the Datalogz query language (DSL). Use it to find assets by name or ID, inspect ownership and metadata, or follow relationships and lineage. It returns matching rows and a total count when available, even when only a sample is shown.

    The query runs against one connector. Available fields and relationships come from describe_catalog; upstream and downstream lineage depend on the platform and collected data.

    Example: “Which reports depend on the Finance semantic model?”

    These tools use the shared inventory and can cover all available connectors or one selected connector.

    Counts inventory assets by data-source type, helping you understand which source technologies feed your BI estate. An optional source_filter, such as snowflake, adds a matching asset count based on source type or connection details while retaining the overall breakdown. Counts represent inventory assets.

    Example: “How many assets use Snowflake, and what other data sources do we use?”

    Lists assets with recorded data-source information, including asset name, type, source type, workspace, and owner when available. Filter by source type or connection details to investigate the assets behind a breakdown.

    Example: “Show the assets that use Snowflake, with their workspaces and owners.”

    These tools support Power BI. Start with the report ranking to discover an asset, then use its ID to inspect usage or viewers.

    Ranks reports by view count over a chosen period, with a default of 30 days. Results include views, downloads, distinct viewers, and available report, workspace, and owner details. Use it to identify widely used reports before investigating an individual report.

    Example: “What are our 10 most-viewed Power BI reports in the last 90 days?”

    Returns view counts and distinct-viewer counts for one report across several lookback periods, plus totals across the available history. The default periods are 30, 60, and 90 days; custom periods, such as 7 and 45 days, are supported. Requires the report's asset_id.

    Example: “Compare views and unique viewers for the Sales Overview report over 30, 60, and 90 days.”

    Lists viewers of one report, with their view counts and last-viewed dates, over a chosen period. The default is 30 days. Names and emails appear when they can be matched to directory data; unmatched viewers are marked as unresolved. Requires the report's asset_id.

    Example: “Who viewed Sales Overview in the last 30 days, and are any viewers unresolved?”

    These tools surface potentially overlapping assets for review. Each searches within one connector and uses a minimum similarity score (min_score) of 0.7 by default. Increase the threshold to focus on closer matches.

    Finds assets similar to a specific Power BI report or semantic model, ordered by similarity score. Returns matching asset IDs, names, owners when available, and scores. Supply the source asset_id and choose asset_type: report (default) or dataset for semantic models.

    Example: “Find reports similar to Sales Overview so we can review possible duplicates.”

    Ranks Power BI assets by how many similar assets meet the score threshold. Use it to prioritize consolidation reviews across a connector. Choose asset_type: report (default) or dataset for semantic models. Results include each asset's similar-asset count.

    Example: “Which Power BI semantic models have the most potential duplicates?”

    Finds assets similar to a specific Tableau dashboard or data source, ordered by similarity score. Returns matching asset IDs, names, owners when available, and scores. Supply the source asset_id and choose asset_type: dashboard (default) or datasource.

    Example: “Which Tableau dashboards are most similar to Executive Overview?”

    Ranks Tableau assets by how many similar assets meet the score threshold. Choose asset_type: dashboard (default) or datasource. Use the returned counts to identify where a duplication review could have the greatest impact.

    Example: “Which Tableau data sources have the most similar alternatives?”

    Summarizes successful, failed, and total refreshes, plus the success ratio, for connectors with recorded refresh activity. Uses the latest available snapshot containing refresh counts for each connector. It can cover multiple platforms or one selected connector and provides a connector-level health overview.

    Example: “Which connectors have the lowest refresh success rates?”

    Lists Power BI capacities with their recorded state, region, capacity type, and Premium or Fabric indicators. Use it to check capacity configuration and state when investigating an issue. CPU utilization and other live performance measurements are outside this tool's scope.

    Example: “List our Power BI capacities and show which are active or paused.”

    Shows recorded Power BI workspace membership and roles. Supply either a workspace_id to list its members, or a user_query containing a name or email fragment to find that user's workspaces and roles. Choose one mode per request.

    Example: “Which Power BI workspaces can alex@example.com access, and with what roles?”

    Builds a user overview from a name or email search: owned or created assets, activity counts and recent actions, and workspace access. Ownership can span connected platforms; action history and workspace roles are Power BI only. Use a full email address to reduce ambiguous matches. Activity covers the available history, with a sample of recent events.

    Example: “What does alex@example.com own, what have they done recently, and which Power BI workspaces can they access?”

    Finds monitor alerts by creation date or date range, status, priority, or asset name. Returns the total matching count, breakdowns by priority and status, a sample of the newest matching alerts, and the available alert date range. Searches across the authenticated account.

    Example: “Show this week's alerts for Finance assets, grouped by priority and status.”

    Lists monitors created and connectors added during an optional date range. Includes daily monitor-creation counts and monitor details to help explain changes in monitoring coverage. An optional name_query filters monitor names; connector additions remain filtered by date. Searches across the authenticated account.

    Example: “Which monitors and connectors were added last week?”

    Summarizes one date: alerts raised by priority and asset type, assets created, and connectors and monitors added. It also shows how many alerts came from monitors created that day, helping put an alert spike in context. Supply a date and optionally select one connector.

    Example: “Summarize September 15, 2026, including alerts generated by monitors added that day.”

    • Be specific: Include the platform, connector, asset or user, and time period relevant to your question. Your assistant can look up asset and workspace IDs through the inventory tools.

    • Use clear dates: Date inputs use YYYY-MM-DD; date ranges include both endpoints. Usage tools accept lookback periods in days.

    • Distinguish totals from samples: Most tools that accept limit default to 25 rows, with a configured maximum of 200. The report-viewer tool defaults to 100. A returned list may be a sample; use a separate total when the response provides one. Deployment settings can change these limits.

    Search, Views and Filters in the Inventory Table

    Search, filters, and asset-type shortcuts work together to take you from a broad inventory to a precise, actionable view. Inventory is the system of record for every analytics asset across your estate. Custom Views, Shared Views, and Favorites let each person and team carve that estate into the slices they actually work from, so triage and reporting start from the right set of assets every time. This is part of the Inventory capability. The numbers below match the controls in the screenshot.

    Number
    Name
    Description

    1

    Search Bar

    1. Click Filters next to the search bar to open the Asset Filters panel.

    2. Give your filter a name.

    3. Add Rules and Groups. Use AND or OR.

      1. Rules define a single condition based on an asset attribute (for example, Asset Name Does Not Contain “uat”).

    The following example excludes all assets containing "uat", but includes assets containing "evaluation".

    1. Open the Inventory tab and arrange the grid the way you want it: apply search and filters, sort, and set columns with Edit Columns (reorder, rename, freeze, and add or remove columns).

    2. Click Save in the views toolbar.

    3. Give the view a name (up to 24 characters) and choose its visibility.

    4. Click Save to store it. The view appears in the View picker.

    Use the View picker to switch between views at any time. A Modified badge appears when the current grid differs from the saved view, so you always know whether you are looking at a saved state or unsaved changes.

    From the view picker kebab menu you can:

    • Rename a view.

    • Duplicate a view from its live state.

    • Set as default so it loads first when you open Inventory.

    • Delete a view you no longer need.

    Shared Views let a team converge on one agreed slice of the assets they own.

    1. Create or open the view you want to share.

    2. Click Save (or Save as) and set visibility to Shared with team.

    3. Save the view. It now appears for everyone on the team.

    Only the view's owner, or a team administrator, can change a shared view or its visibility. Changing visibility back to personal removes it from teammates' pickers.

    Favorites give each user quick access to the handful of assets they watch most closely.

    1. In the Assets grid, click the star in the favorites column on any asset row to favorite it.

    2. Switch to the My Favorites view to see only your starred assets.

    Favorites are personal to you and work across Power BI, Tableau, Sigma, Qlik, Databricks, and SharePoint.

    Datalogz Security

    Introduction

    This document provides an in-depth look at Datalogz, a SaaS-based, read-only metadata application, detailing how it interfaces with various BI tools, handles authentication, and ensures data security.

    Overview of Datalogz SaaS Solution

    Datalogz is a specialized tool designed to administer BI environments effectively through the analysis of non-proprietary metadata. It operates exclusively in a SaaS environment, ensuring enhanced efficiency and security.

    Metadata Read from BI Tools

    BI Tool

    Data Connected

    Authentication

    Notes

    Tableau

    Tableau

    Personal Access Token

    The Datalogz application uses Apache Airflow for connector management, providing BI Admins with pre-built metadata pipelines they can choose to schedule daily, weekly or hourly basis. New alerts will be generated after each connector refresh based on the latest data that has changed.

    Your connectors will retrieve metadata from the following API endpoints:

    • PowerBI: Endpoints listed.

    • Tableau: Endpoints listed.

    • Qlik: Endpoints listed .

    Connectors must be configured by BI Admins to approve the Datalogz application. This will provide read-only access to standard and admin-level APIs based on a selection of Groups. Groups are generally defined as follows for each system:

    • PowerBI: Workspaces

    • Tableau: Projects

    • Qlik: Streams

    The admin-level APIs unlock the most insight for your BI Admins when it comes to types of Issues and Recommendations Datalogz is able to provide. After a new connector is created, BI Admins can use Datalogz RBAC to assign fine-grained permissions to Users who should only have access to certain metadata from certain Groups.

    The credentials for the BI Metadata APIs are securely stored. They are encrypted and placed in an AWS Managed PostgreSQL database located within a private subnet of the Datalogz Virtual Private Cloud.

    For added security, only the Datalogz Kubernetes cluster, which also operates within private subnets, has network access to these credentials.

    Datalogz is able to provide BI Ops insights and recommendations using metadata about the existence of BI reports, users, activities, and other BI assets. Datalogz does not require any data access to generate these recommendations, so we do not require this level of permission to be granted to service principal credentials or personal access tokens. This means Datalogz does not have access to query any data that is used in BI reports. Datalogz only requires access to metadata about the nature of those BI reports, such as the title, description, configuration, asset lineage, usage patterns, refresh durations, successful uptime, and governance features. From this information, the Datalogz recommendations are generated without data access, which can also be described as “read-only access to metadata only.”

    Compared to the On-Prem Deployment, a SaaS Deployment has the following benefits:

    • Datalogz monitors and maintains all infrastructure required to run the Datalogz BI Ops platform.

    • Datalogz monitors and maintains all services, code, and images required to run the backend and frontend services.

    • Datalogz upgrades, tests, and deploys all new versions of Datalogz to give you a seamless experience between versions.

    • No resources on your end are required to commit to the following activities that are part of an on-prem deployment engagement:

    How To: Notify report owners when a refresh fails

    Use case: Routing a failed refresh alert to the right owner without leaving Datalogz

    This use case explains how to create a workflow that lets a BI admin notify a report owner directly from a failed refresh alert, without switching to email, looking up contact details, or writing a message from scratch.

    Why is it important?

    When a report fails its scheduled data refresh, business users may be consuming stale or incomplete data without knowing it. The faster the owner is informed, the faster the issue gets investigated and resolved. Without a workflow, notification is manual: find the alert, identify the owner, open email, write the message, send it. Across dozens of alerts a week, this adds up, and follow-through is inconsistent.

    A workflow eliminates that overhead. It surfaces a single button on every matching alert, and logs the action so nothing falls through the cracks.

    Who is responsible for it?

    This use case is typically owned by:

    • BI administrators

    • Analytics platform owners

    • BI Ops or Center of Excellence (CoE) teams

    These roles are responsible for monitoring BI health, resolving operational issues, and ensuring report owners are held accountable for the assets they manage.

    1. In Datalogz Control Tower, go to Settings > Workflows > Definitions.

    2. Click Create Workflow.

    3. Enter a name and description, for example: Notify report owner: failed refresh. This is what users will see on the alert page.

    4. Under Trigger Configuration, select Manual.

    When a failed refresh alert fires:

    1. Open the alert in Datalogz Control Tower.

    2. Click the Run Workflow button and select Notify report owner: failed refresh.

    3. In the dialog, set the Recipient type to User and select the report owner.

    4. Write a comment.

    Datalogz Control Tower sends the email immediately. The session is recorded in the workflow , including the recipient, timestamp, and outcome.

    Check data coverage: Empty results can reflect missing scan data, unavailable platform fields, or filters that match nothing. Use connector discovery and the catalog to confirm what is available.

    Connectors and inventory

    list_connectors

    describe_catalog

    run_dsl_query

    Data sources

    data_source_breakdown

    list_data_sources

    Report usage

    powerbi_top_viewed_reports

    powerbi_view_counts

    powerbi_report_viewers

    Similarity and duplication

    powerbi_find_similar

    powerbi_top_similar_assets

    tableau_find_similar

    tableau_top_similar_assets

    Refresh and capacity health

    refresh_health

    powerbi_capacity_health

    Users and workspace access

    powerbi_workspace_access

    user_activity

    Alerts and platform changes

    alerts

    platform_timeline

    day_summary

    Getting useful answers

    Set the Connector to one of your BI connectors, or leave blank to apply across all connectors.

  • Under Linked Monitors, select the Failed Refresh monitor to restrict the workflow to that alert type only.

  • Under Plugin, select Send Email.

  • Click Save. The workflow is now live and will appear on every failed refresh alert that matches the connector filter.

  • Click Run.

    Steps

    Running the workflow from an alert

    history view

    Groups allow you to combine multiple rules into a logical set, making it easier to build more complex filtering logic.

  • AND means all selected rules or groups must be true for an asset to be included.

  • OR means an asset is included if at least one of the rules or groups is true.

  • Click Save to store the filter for future use.

  • Click Apply to apply the filter and update the Inventory table with the filtered results.

  • Enter a keyword (for example, production) to find all assets whose name contains that term. Search is case-insensitive.

    2

    Asset Type Filter Tabs

    Assets in the inventory are grouped by asset type. The Asset Type filter tabs let you quickly narrow the list to the type of asset you’re looking for. When you use Search, all matching assets appear under the Results tab, with tiles showing how many matches were found per asset type (for example, Workspaces, Semantic Models, or Reports in a Power BI inventory). Selecting a tile filters the table to that specific asset type.

    3

    Asset Filter

    Filters allow you to refine your inventory view using structured rules instead of free-text search.

    Create rules and groups to include or exclude assets based on their name. You can save your filter and reuse it every time you visit the Inventory.

    Filters are built using simple, readable rules:

    • Field: what you want to filter on. Currently, only the asset name field is available.

    • Operator: how the condition is evaluated (e.g. Contains, Does Not Contain)

    • Value: the text or value to match

    The asset filter is case-insensitive.

    4

    Custom and System Views

    A view is a saved configuration of the Assets grid: which columns appear, their order, which are frozen, and the active search, filters, and sort. Datalogz Control Tower ships three system views to start from:

    • All Assets: every asset the team can see.

    • Unhealthy: assets with one or more open alerts.

    • Favorites: all assets marked as favorites

    5

    Attribute Filter

    Use Attribute filters to further refine your inventory results by filtering on specific asset attributes, such as health status. This helps you focus on the assets that meet particular conditions and quickly identify items that require attention.

    In addition to filtering, you can also sort columns and pin them at the beginning or end of the table.

    Creating an Asset Filter

    Creating a custom view

    Every view has a shareable ?view= link. Copy the URL and the recipient opens Inventory on the same view, with the same columns, filters, and sort.

    How to manage views

    How to share a view with your team

    How to use Favorites

    Monitoring and maintaining the infrastructure.

  • Monitor and maintain the services, code, and images required to run the services.

  • Upgrading and deploying new versions of Datalogz using Docker Desktop and some Windows or Linux commands.

  • Datalogz supports connecting to the Tableau Cloud or Server API by Service Account and Personal Access Token with read-only metadata access.

    Qlik

    Qlik Developer API

    OAuth Connection

    Datalogz integrates with Qlik View through its APIs, offering read-only metadata access. This allows Datalogz to analyze and administer the BI environment by accessing Qlik View dashboards and reports. The integration supports both Qlik View Server and Desktop versions.

    Power BI

    Power BI Rest APIs

    Service Principal

    Datalogz requires read-only access to PowerBI's administrative APIs for a single PowerBI tenant.

    Spotfire

    Spotfire APIs

    API Key / OAuth Token

    Datalogz connects to TIBCO Spotfire using its APIs, enabling read-only metadata access. It supports both cloud and on-premises deployments of Spotfire. The integration allows for effective analysis and administration of the BI environment by accessing Spotfire dashboards, reports, and data visualizations. Authentication is typically through an API Key or OAuth token, ensuring secure and restricted access.

    Connector Pipeline

    Authentication and Security Measures

    Datalogz as a "Read Only" Metadata Application

    Architecture Diagram

    Comparison with On-Prem Deployment

    here
    here
    here
    Rest APIs

    Connecting to an MCP Server

    The Control Tower MCP server speaks the standard Model Context Protocol, so any compliant client can connect to it (Claude Desktop, Claude Code, Cursor, VS Code, Databricks Genie or your own agent built on an MCP SDK).

    Before you start

    • At least one connector onboarded and scanned. The server reports on data Control Tower has already collected; it does not scan anything itself. See the Connector Onboarding Guide.

    • A Control Tower credential. The agent inherits that credential's connector scope and it sees exactly what the credential is entitled to see, and nothing else.

    • Admin access to Claude, Copilot or Genie. You need to be able to add new connectors to Claude, Copilot or Genie

    Connect your AI client to Control Tower with one URL:

    Use the HTTPS URL supplied by Datalogz. You do not need a client ID, client secret, or API token. When prompted, sign in with a verified Control Tower administrator account and approve access.

    1. Open Customize > Connectors.

    2. Select Add custom connector and enter the Control Tower MCP URL.

    3. Leave the advanced OAuth client ID and secret fields empty, then select Add.

    4. Select Connect and complete the browser sign-in.

    For Team and Enterprise plans, an organization owner must first add the connector from Organization settings > Connectors > Add > Custom > Web. Members can then connect it from Customize > Connectors.

    Enable Control Tower for a conversation from + > Connectors.

    Add Control Tower for all your projects:

    In Claude Code, run /mcp, select control-tower, and complete the browser sign-in.

    In newer app versions, MCP management is not shown in the Settings sidebar:

    1. From the main app open the command menu with Command+K on macOS or Ctrl+K on Windows and Linux.

    2. Search for MCP and select MCP Servers.

    3. Select Add Server.

    If the MCP command is unavailable, configure the shared MCP connection from a terminal and then restart the app (see "Codex" below)

    Add the server and start OAuth sign-in:

    Skip these commands if you already added the server for the ChatGPT desktop app.

    Run codex mcp list, or use /mcp in the Codex terminal UI, to confirm the connection. Codex and the ChatGPT desktop app share MCP configuration on the same computer.

    1. Open your agent's Tools page and select Add a tool > New tool > Model Context Protocol.

    2. Enter a name, a short description, and the Control Tower MCP URL.

    3. For authentication, select OAuth 2.0 > Dynamic discovery.

    4. Select Create, then Next.

    Register the MCP server in Unity Gateway

    1. In your Databricks workspace, open Unity Gateway and select the MCPs tab.

    2. Click + MCP and choose Connect an existing MCP server.

    3. Choose a catalog and schema, and enter an MCP name, for example datalogz_control_tower. The name can't be changed later.

    Field
    Value
    1. Click Create & load tools. Databricks requests a token from Control Tower and lists the available tools.

    2. Under Tools, select the Control Tower tools you want to make available.

    3. Click Create MCP Service.

    4. Select Genie One or Genie Code.

    Your server is now available at:

    In Datalogz Control Tower:

    1. Go to Settings > OAuth Clients.

    2. Click New OAuth Client.

    3. Fill out the following fields:

    Value
    Description
    1. Click Create.

    2. Copy the Client ID.

    In Claude:

    1. Go to Organization Settings.

    2. Click Connectors > + Add

    3. Select Custom and then Web.

    4. Fill out the following fields:

    Value
    Description
    • Confirm that the URL uses HTTPS and ends in /mcp.

    • If authentication expires or is revoked, reconnect the server and sign in again.

    • If approval is denied, ask a Control Tower account administrator to complete the connection.

    • If a tool returns nothing at all. Your credential may have no access to the connector in question.

    For client-specific details, see the official setup guides for , , , and .

    Name it Control Tower, choose Streamable HTTP, enter the Control Tower MCP URL, https://app.datalogz.io/mcp and select Save.

  • Select Authenticate, complete the browser sign-in, and restart the app if prompted.

  • Create a new connection, complete the browser sign-in, and select Add to agent.

    Click Create new connection and fill in the fields:
  • If a platform-specific tool refuses your asset. Usage, viewer, workspace-access and capacity tools are Power BI only. Similarity is Power BI and Tableau. Downstream impact is Power BI, Tableau and Sigma. See the Tool reference.

  • If the numbers look stale. The server reads what the last connector scan wrote. Check scan status in the app rather than retrying the query.

  • https://app.datalogz.io/mcp
    claude mcp add --transport http --scope user \
      control-tower "https://app.datalogz.io/mcp"
    codex mcp add control-tower --url "https://app.datalogz.io/mcp"
    codex mcp login control-tower

    MCP server URL

    https://app.datalogz.io/mcp

    Authentication method

    OAuth Machine to Machine

    Client ID

    The from Datalogz Control Tower

    Client secret

    The from Datalogz Control Tower

    Token endpoint

    https://app.datalogz.io/api/v0/oauth/token

    https://<your-workspace-hostname>/ai-gateway/mcp-services/<catalog>.<schema>.<mcp-name>

    Name

    The name you choose for the Client.

    Type

    You can create two types of OAuth clients. For the MCP oAuth client, you select the Interactive PKCE type.

    Redirect URIs

    Select or fill out the callback URIs. If you want to add the MCP server to Claude or Copilot, you can select the predefined URIs.

    Advanced - Connector access

    Limit the scope of the MCP server by linking it to a specific connector. Leave this part blank to allow the tool to search every connector your credential can reach; pass one and the tool answers for that connector alone.

    Name

    The name you choose for the MCP server.

    Remote MCP server URL

    Type https://app.datalogz.io/mcp

    Claude Desktop

    Claude Code

    ChatGPT desktop app

    Codex

    Microsoft Copilot Studio

    Databricks Genie

    The MCP server is available for Genie One and Genie Code only:

    • Genie One and Genie Code are general agents. They plan, call tools and string steps together, so they can take MCP servers, Datalogz included.

    • A Genie Agent is still a text-to-SQL space. It’s curated over at most 50 Unity Catalog tables, with your instructions and example SQL. Its “tools” are those tables, and nothing I found lets you attach an external MCP server to one.

    Manually create a client

    Troubleshooting

    Claude connectors
    Claude Code
    ChatGPT and Codex
    Microsoft Copilot Studio

    OAuth scope

    ct:mcp

    Credential Exchange Method

    Header only

    client ID
    client secret

    Qlik monitors

    Qlik monitors are pre-configured monitors to help you quickly begin monitoring common and critical aspects of your Qlik environment. For more information, see the Monitors documentation.

    This list contains all out of the box Datalogz Qlik monitors. Customisations can be made by cloning an existing monitor or on request.

    Inactive users

    BI Pillar

    Cost

    Alert Type

    Asset-Based

    Description

    This monitor alerts when a Qlik Sense user is made inactive without being removed.

    Potential Impact

    Increased security risks, cluttered workspaces, and unoptimized system performance due to unmanaged users and assets.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Check user account status and determine if reactivation or removal is necessary.

    • Reassign ownership of assets owned by the user to an appropriate, active team member or service account.

    BI Pillar

    Governance

    Alert Type

    Asset-Based

    Description

    This monitor alerts when a Qlik Sense data connection is created by a user who is marked as inactive or has a null owner ID. Its purpose is to prevent the accumulation of unmanaged or forgotten data connections that can consume resources and pose governance risks.

    Potential Impact

    Increased security risks, cluttered workspaces, and unoptimized system performance due to unmanaged assets.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Review orphaned data connections to verify their importance.

    • Determine if they should be reassigned to an active user, archived for historical purposes, or deleted.

    • Reassign ownership to an appropriate, active team member or service account.

    BI Pillar

    Governance

    Alert Type

    Asset-Based

    Description

    This monitor alerts when a Qlik Sense app is created by a user who is marked as inactive or has a null owner ID. Its purpose is to ensure all apps have clear, active ownership, which is crucial for content management, data governance, and user support.

    Potential Impact

    Stale or inaccurate reports, a lack of support for app users, and an overall decline in data governance.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Review orphaned apps to determine if they are still in use.

    • Reassign ownership to an active team member.

    • Consider archiving or deleting the app if it is no longer needed.

    BI Pillar

    Security

    Alert Type

    Event-Based

    Description

    This monitor alerts when a Qlik Sense user has recently been assigned the RootAdmin role. Its purpose is to highlight potential elevation of privileges that may require immediate review to maintain security.

    Potential Impact

    Unauthorized system changes, data breaches, and non-compliance with security policies.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Review the site role changes and verify if the user should retain RootAdmin privileges.

    • Restrict admin access to only essential personnel.

    BI Pillar

    Security

    Alert Type

    Event-Based

    Description

    This monitor alerts when a Qlik Sense user’s roles have changed recently, indicating a shift in access permissions that should be reviewed for compliance or security purposes.

    Potential Impact

    Unauthorized access to sensitive data, unintended data exposure, and security policy non-compliance.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Review the site role changes and verify if they align with security policies.

    • Investigate any changes that are unauthorized or unexpected.

    • Implement a role change approval process to add an extra layer of security and oversight.

    • Document all role changes and the reasons behind them for future reference and accountability.

    • Provide training for users with elevated privileges to ensure they understand their responsibilities and the security implications of their access.

    BI Pillar

    Security

    Alert Type

    Event-Based

    Description

    This monitor alerts when users have multiple failed login attempts in the past 30 days. Its purpose is to identify and flag potential unauthorized access attempts, helping to protect your data from breaches.

    Potential Impact

    Unauthorized access to the system, data breaches, and compromised user accounts.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Investigate users with multiple failed authentication attempts.

    • If necessary, enforce password changes or block suspicious accounts.

    BI Pillar

    Governance

    Alert Type

    Asset-Based?

    Description

    This monitor alerts when a Qlik Sense data connection has not been updated in the last 30 days. Its purpose is to ensure data connections remain relevant and actively managed, preventing the accumulation of outdated connection settings.

    Potential Impact

    Outdated data, potential data quality issues, increased complexity in data lineage, and inefficient resource utilization.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Review the data connection with the owner to determine if it is still in use.

    • If not, consider archiving or deleting it to optimize resources.

    BI Pillar

    Governance

    Alert Type

    Asset-Based?

    Description

    This monitor alerts when a Qlik Sense app has not been updated for over 30 days. Its purpose is to ensure that all Qlik Sense apps remain current and relevant to user needs, preventing the use of outdated content.

    Potential Impact

    Consumption of outdated information, user confusion, and reduced confidence in reporting.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Review the app with the owner to determine if it is still in use.

    • If not, consider archiving or deleting it to optimize resources.

    BI Pillar

    Performance

    Alert Type

    Event-Based?

    Description

    This monitor alerts when a Qlik Sense task takes more than 1 hour to complete. Its purpose is to ensure timely data availability and optimize system performance by flagging tasks that are exceeding expected runtimes.

    Potential Impact

    Delayed data availability, outdated reports, increased load on system resources, and potential refresh failures due to timeouts.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Review the execution logs of long-running tasks.

    • Optimize queries or processes that are causing the delays.

    BI Pillar

    Performance

    Alert Type

    Event-Based?

    Description

    This monitor alerts when an NPrinting task has failed in its last execution. Its purpose is to ensure the timely and successful delivery of NPrinting reports and documents, which are crucial for business operations.

    Potential Impact

    Failure to distribute critical reports, outdated information reaching stakeholders, and potential operational disruptions.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Check the NPrinting task execution logs to diagnose and resolve failures.

    BI Pillar

    Performance

    Alert Type

    Event-Based?

    Description

    This monitor alerts when a task's execution duration has increased by at least 30% over the past 5 executions compared to the previous 5 executions. Its purpose is to proactively identify performance bottlenecks or underlying issues before they lead to task failures or significant delays.

    Potential Impact

    Degradation of system performance, delayed data availability, and potential for task failures if duration increases further.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Review the task execution logs to identify performance bottlenecks or potential issues causing increased execution time.

    BI Pillar

    Governance

    Alert Type

    Event-Based?

    Description

    This monitor alerts when a Qlik Sense task fails to complete successfully or ends with a warning. Its purpose is to ensure continuous data freshness and reliability by flagging tasks that have failed or completed with warnings.

    Potential Impact

    Outdated data in reports, inaccurate business insights, and reduced user trust in the data.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Investigate failed tasks and check execution logs to determine the root cause.

    BI Pillar

    Governance

    Alert Type

    Event-Based?

    Description

    This monitor alerts when a Qlik Sense app has experienced a failed reload. Its purpose is to ensure that all Qlik apps have up-to-date data, preventing the use of stale information that could lead to misinformed decisions.

    Potential Impact

    Stale data in reports, inaccurate insights, and disruption to business operations reliant on fresh data.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Check the app task execution logs to diagnose and resolve failures.

    BI Pillar

    Cost

    Alert Type

    Asset-Based

    Description

    This monitor alerts when Qlik Sense tasks have not been executed in the past 90 days. Its purpose is to optimize system performance and licensing costs by identifying and managing tasks that are no longer needed.

    Potential Impact

    Inefficient resource allocation and cluttered system management with unnecessary tasks.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Review unused tasks with stakeholders to determine if they should be reactivated or removed to optimize system performance.

    Orphaned Data Connections (Created by Inactive Users)

    Orphaned Apps (Created by Inactive Users)

    User Is New Root Admin

    User Roles Have Changed

    Unusual Security Access Attempts

    Stale Qlik Sense Data Connections

    Stale Qlik Sense Apps

    Long-Running Tasks

    NPrinting Task Execution Failed

    Task Duration Time Increasing

    Task Execution Failures

    App Failed Reload

    Unused or Dormant Tasks

    Tableau monitors

    Tableau monitors are pre-configured monitors to help you quickly begin monitoring common and critical aspects of your Tableau environment. For more information, see the Monitors documentation.

    This list contains all out of the box Datalogz Tableau monitors. Customisations can be made by cloning an existing monitor or on request.

    The default monitor catalog

    Control Tower ships 22 default Tableau monitors across the four pillars. Every monitor can be switched on or off in the Monitor Catalog, and cloned into My Monitors to tailor its logic. Grouped by what they protect:

    Stale and unused content (Cost Management, Governance): Stale Datasources, Stale Projects, Stale Views, Stale Workbooks, Unused Datasources, Unused Views, Unused Workbooks, Unused Stories, Unused Dashboards, and Unused External Assets.

    Licensing (Cost Management): Unused High-Level Licenses, and Unused Viewer Licenses.

    Refresh reliability (Performance): Datasource Not Refreshed Recently, and Datasource Refresh Failure.

    Governance and security (Governance, Security): Non-Enterprise-Standard Data Connections, Uncertified Datasources, Users Without SAML Setup, and Site Role Changes.

    Orphaned and overloaded (Governance): Orphaned Datasources, Orphaned Views, Projects with Large Datasource Counts, and Workbooks with Unlicensed Owner.

    Monitor details

    Selected monitors in detail:

    Users Without SAML Setup

    BI Pillar

    Security

    Alert Type

    Asset-Based

    Description

    This monitor flags Tableau users who do not have SAML authentication set up. Its purpose is to ensure all users utilize SAML for secure authentication, thereby enhancing overall system security.

    Potential Impact

    Security vulnerabilities, non-compliance with security policies, and increased risks of unauthorized access.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Ensure all users have SAML setup for secure authentication. Implement SAML for all Tableau users to centralize authentication, improve security, and streamline user management. This ensures a single sign-on experience and adherence to enterprise security policies.

    BI Pillar

    Security

    Alert Type

    Asset-Based

    Description

    This monitor alerts for data sources that remain uncertified, potentially impacting data integrity and security compliance. Its purpose is to prompt a review of these data sources to confirm accuracy and consider certification, which improves data governance and trustworthiness.

    Potential Impact

    Compromised data integrity, security vulnerabilities, reduced trust in data, and potential non-compliance with organizational standards.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Review uncertified data sources to confirm accuracy and trustworthiness. Engage with data owners to validate the data quality and relevance.

    • Consider certifying data sources that meet your organization's standards. Certification in Tableau marks a data source as approved and reliable, improving data governance and encouraging user adoption of trusted data.

    BI Pillar

    Security

    Alert Type

    Asset-Based

    Description

    This monitor alerts when a Tableau workbook has an owner who is unlicensed or no longer listed in the user directory. Its purpose is to highlight potential ownership risks and ensure proper maintenance and accountability for workbooks.

    Potential Impact

    Unmanaged workbooks, outdated content, security risks due to unclear ownership, and difficulty in providing user support and maintenance.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Review the ownership of the workbook using Tableau Server/Cloud's administrative views.

    • If the owner is inactive or unlicensed, transfer ownership to an active, appropriate user or a service account. Tableau Server/Cloud allows administrators to easily reassign content ownership.

    • Consider archiving the workbook if it's no longer needed, moving it to a designated "archive" project or deleting it.

    BI Pillar

    Security

    Alert Type

    Event-Based

    Description

    This monitor alerts for any changes in user site roles within the last 6 months, highlighting modifications to access permissions or user privileges. Its purpose is to ensure these changes align with security policies and user responsibilities.

    Potential Impact

    Unauthorized privilege escalation, security breaches, and non-compliance with access control policies.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Review recent role changes by examining Tableau Server/Cloud's audit logs or administrative views related to user activity and permissions.

    • Ensure these changes align with security policies and user responsibilities. Confirm that permissions granted are necessary and adhere to the principle of least privilege.

    • Investigate any unexpected or unauthorized role modifications to mitigate security risks promptly.

    BI Pillar

    Governance

    Alert Type

    Asset-Based

    Description

    This monitor alerts when a Tableau view has not been updated in the last 30 days. Its purpose is to identify views that may be outdated or no longer actively used, helping to reduce clutter and maintain environment hygiene.

    Potential Impact

    Outdated information being consumed, a cluttered environment, user confusion, and inefficient resource utilization.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Contact the view owner to confirm whether they still actively use or need the view.

    • Utilize Tableau Server/Cloud's administrative views (e.g., "Traffic to Views") to assess actual usage and identify truly stale content.

    • If it is no longer needed, consider reassigning ownership, moving it to a "deprecated" project, or archiving it to reduce clutter and maintain a healthy Tableau site..

    BI Pillar

    Governance

    Alert Type

    Asset-Based

    Description

    This monitor alerts when a Tableau datasource has not been updated in the last 30 days. Its purpose is to identify datasources that may be outdated or no longer actively used, helping to reduce clutter and maintain environment hygiene.

    Potential Impact

    Outdated data, potential data quality issues, and inefficient resource usage.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Contact the datasource owner to confirm whether they still actively use or need it.

    • Check Tableau Server/Cloud's administrative views (e.g., "Traffic to Data Sources") to verify recent usage.

    • If it is no longer needed, consider reassigning ownership, moving it to a "deprecated" project, or archiving it to reduce clutter and maintain a healthy Tableau site..

    BI Pillar

    Governance

    Alert Type

    Asset-Based

    Description

    This monitor alerts when a Tableau workbook has not been updated in the last 30 days. Its purpose is to identify workbooks that may be outdated or no longer actively used, helping to reduce clutter and maintain environment hygiene.

    Potential Impact

    Outdated information being consumed, a cluttered environment, user confusion, and inefficient resource usage.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Contact the workbook owner to confirm whether they still actively use or need the workbook.

    • Leverage Tableau Server/Cloud's administrative views (e.g., "Traffic to Workbooks") to understand actual usage patterns.

    • If it is no longer needed, consider reassigning ownership, moving it to a "deprecated" project, or archiving it to reduce clutter and maintain environment hygiene.

    BI Pillar

    Governance

    Alert Type

    Asset-Based

    Description

    This monitor alerts when a Tableau project has not been updated in the last 30 days. Its purpose is to identify projects that may be outdated or no longer actively used, helping to reduce clutter and maintain environment hygiene.

    Potential Impact

    A cluttered environment, difficulty in project management, and inefficient resource usage.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Contact the project owner to confirm whether they still actively use or need the project.

    • Review the content within the project to determine if any active workbooks or data sources are still in use.

    • If it is no longer needed, consider reassigning ownership, moving it to a "deprecated" project, or archiving it to reduce clutter and maintain a healthy Tableau site..

    BI Pillar

    Cost

    Alert Type

    Asset-Based

    Description

    This monitor alerts when a high-level Tableau license (e.g., Creator, Explorer, Administrator) has not been utilized for over six months. Its purpose is to identify potential for reallocation or removal to optimize licensing costs.

    Potential Impact

    Unnecessary licensing costs and inefficient resource allocation.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Review the user's activity over the past six months using Tableau Server/Cloud's administrative views (e.g., "Stale Content" or "User Activity").

    • If inactive, consider reassigning or downgrading the license to a lower-cost role (e.g., Viewer) or removing it entirely to optimize resource usage and reduce licensing costs.

    BI Pillar

    Cost

    Alert Type

    Asset-Based

    Description

    This monitor alerts when a Tableau Viewer license has not been utilized for over six months. Its purpose is to identify potential for reallocation or removal to optimize licensing costs.

    Potential Impact

    Unnecessary licensing costs and inefficient resource allocation.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Review the user's activity over the past six months using Tableau Server/Cloud's administrative views.

    • If inactive, consider reassigning or removing the license to optimize resource usage and reduce licensing costs.

    BI Pillar

    Cost

    Alert Type

    Asset-Based

    Description

    This monitor alerts when a Tableau datasource has not had activity in the last 30 days. Its purpose is to identify datasources that are no longer actively used, helping to optimize storage and maintenance.

    Potential Impact

    Wasted storage, a cluttered environment, and an increased maintenance burden.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Contact the datasource owner to confirm whether they still actively use or need the datasource.

    • Check Tableau Server/Cloud's administrative views (e.g., "Traffic to Data Sources") to verify recent usage.

    • If it is no longer needed, consider reassigning ownership, moving it to a "deprecated" project, or archiving it to reduce clutter and maintain a healthy Tableau site..

    BI Pillar

    Cost

    Alert Type

    Asset-Based

    Description

    This monitor alerts when a Tableau view has not had activity in the last 30 days. Its purpose is to identify views that are no longer actively used, helping to optimize storage and maintenance.

    Potential Impact

    Wasted storage, a cluttered environment, and an increased maintenance burden.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Contact the view owner to confirm whether they still actively use or need the view.

    • Utilize Tableau Server/Cloud's administrative views (e.g., "Traffic to Views") to assess actual usage.

    • If it is no longer needed, consider reassigning ownership, moving it to a "deprecated" project, or archiving it to reduce clutter and maintain a healthy Tableau site.

    BI Pillar

    Governance

    Alert Type

    Asset-Based

    Description

    This monitor alerts when a Tableau dashboard has not had activity in the last 30 days. Its purpose is to identify dashboards that are no longer actively used, helping to optimize storage and maintenance.

    Potential Impact

    Wasted storage, a cluttered environment, and an increased maintenance burden.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Contact the owner to confirm whether they still actively use or need the dashboard.

    • Utilize Tableau Server/Cloud's administrative views (e.g., "Traffic to Views") to assess actual usage.

    • If it is no longer needed, consider reassigning ownership, moving it to a "deprecated" project, or archiving it to reduce clutter and maintain a healthy Tableau site.

    BI Pillar

    Cost

    Alert Type

    Asset-Based

    Description

    This monitor alerts when an embedded external asset has no relationship to any Tableau content, including databases and their tables that have no downstream dependencies. Its purpose is to identify such assets and recommend their deletion to promote an efficient environment.

    Potential Impact

    Unnecessary storage costs, a cluttered data environment, and increased complexity in data management.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Identify external assets not linked to any Tableau content by reviewing data source connections within Tableau Desktop or Server.

    • Collaborate with data engineers or database administrators to confirm if these underlying database tables or connections are truly unused.

    • Delete external assets that are not used in any Tableau Workbook or published data source to promote an efficient environment and reduce unnecessary data infrastructure costs.

    BI Pillar

    Governance

    Alert Type

    Asset-Based

    Description

    This monitor alerts when a Tableau story has not had activity in the last 30 days. Its purpose is to identify stories that are no longer actively used, helping to optimize storage and maintenance.

    Potential Impact

    Wasted storage, a cluttered environment, and an increased maintenance burden.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Contact the owner to confirm whether they still actively use or need the story.

    • If it is no longer needed, consider reassigning ownership, moving it to a "deprecated" project, or archiving it to reduce clutter and maintain a healthy Tableau site.

    BI Pillar

    Governance

    Alert Type

    Asset-Based

    Description

    This monitor alerts when a Tableau workbook has not had activity in the last 30 days. Its purpose is to identify workbooks that are no longer actively used, helping to optimize storage and maintenance.

    Potential Impact

    Wasted storage, a cluttered environment, and an increased maintenance burden.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Contact the owner to confirm whether they still actively use or need the workbook.

    • If it is no longer needed, consider reassigning ownership, moving it to a "deprecated" project, or archiving it to reduce clutter and maintain a healthy Tableau site.

    BI Pillar

    Governance

    Alert Type

    Event-Based

    Description

    This monitor alerts when a datasource refresh has failed. Its purpose is to ensure data freshness and reliability by promptly flagging refresh failures.

    Potential Impact

    Stale data, inaccurate reports, and reduced trust in the data.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Investigate the failed refresh by checking the background tasks in Tableau Server/Cloud for detailed error messages.

    • Ensure proper configuration and data source availability. Verify database connectivity, correct credentials, and network access from the Tableau Server/Cloud to the data source.

    • Review the data source connection details in Tableau Desktop or Server to confirm settings are correct.

    BI Pillar

    Governance

    Alert Type

    Asset-Based

    Description

    This monitor alerts when an embedded or published datasource's owner has had no recorded activity in the last 30 days. Its purpose is to ensure active ownership and prevent unmanaged assets that could lead to data inconsistencies or security risks.

    Potential Impact

    Unmanaged datasources, outdated data, security risks, and difficulty in providing user support and maintenance.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Contact the datasource owner to confirm whether they still actively use or need the datasource.

    • Utilize Tableau Server/Cloud's administrative capabilities to transfer ownership to an active user or a service account.

    • If it is no longer needed, consider archiving it (moving to a "deprecated" project) or deleting it to reduce clutter and maintain a healthy Tableau site..

    BI Pillar

    Governance

    Alert Type

    Asset-Based

    Description

    This monitor alerts when a Tableau view owner has had no recorded activity in the last 30 days. Its purpose is to ensure active ownership and prevent unmanaged assets that could lead to outdated content or support challenges.

    Potential Impact

    Unmanaged views, outdated content, and difficulty in providing user support and maintenance.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Contact the view owner to confirm whether they still actively use or need the view.

    • Utilize Tableau Server/Cloud's administrative capabilities to transfer ownership to an active user or a service account.<

    • If it is no longer needed, consider archiving it (moving to a "deprecated" project) or deleting it to reduce clutter and maintain a healthy Tableau site..

    BI Pillar

    Governance

    Alert Type

    Asset-Based

    Description

    This monitor alerts when a datasource has not been refreshed for more than 30 days. Its purpose is to proactively identify datasources that may be providing outdated information, ensuring data freshness and reliability.

    Potential Impact

    Stale data, incorrect business decisions, and reduced trust in reports.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Regularly review datasources that have not been refreshed in over 30 days by checking their refresh schedules and last refresh times in Tableau Server/Cloud.

    • Ensure refresh schedules are correctly configured and enabled. Investigate any underlying issues such as connectivity problems, data source changes, or gateway issues that might be preventing refreshes.

    BI Pillar

    Performance

    Alert Type

    Event-Based

    Description

    This monitor alerts when datasources in Tableau use connection types that may be less desirable due to inefficiencies or higher costs, such as webdata-direct, genericodbc, semistructpassivestore-direct, onedrivesharepoint, and excel-direct. These connections may slow down performance or incur additional expenses, making them suitable for periodic review. Its purpose is to optimize performance and cost by identifying and addressing these less efficient connection types.

    Potential Impact

    Slower performance, increased operational costs, and reduced data governance due to non-standardized connections.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Evaluate the necessity and performance of these data sources. For those with low usage or high costs, consider migrating to more efficient alternatives.

    • Prioritize the use of published, certified Tableau Data Sources or optimized extracts whenever possible, as these generally offer better performance and governance.

    • Review the metadata to identify the user responsible for setting up each source and collaborate on migration plans.

    BI Pillar

    Performance

    Alert Type

    Event-Based

    Description

    This monitor alerts when a project contains more than 10 datasources, which may indicate complex dependencies and potential performance inefficiencies. Its purpose is to identify opportunities for consolidation and optimization, leading to simpler data management and improved performance.

    Potential Impact

    Complex data management, performance bottlenecks, and higher system resource usage.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Assess the project's datasources to identify opportunities for consolidation or optimization. This might involve creating a single, comprehensive published data source that serves multiple workbooks.

    • Encourage the use of shared, published data sources rather than embedding multiple individual connections within workbooks.

    • Reducing the number of datasources can simplify data management, improve performance, and lower system resource usage by centralizing data access and refresh processes.

    Uncertified Datasources

    Workbook with Unlicensed Owner

    Site Role Changes Last 6 Months

    Stale Tableau Views

    Stale Tableau Datasources

    Stale Tableau Workbooks

    Stale Tableau Projects

    Unused High-Level Licenses

    Unused Viewer License

    Unused Datasources

    Unused Views

    Unused Dashboards

    Unused External Assets

    Unused Story

    Unused Workbook

    Datasource Refresh Failure

    Orphaned Tableau Datasources

    Orphaned Tableau View

    Datasource not recently Refreshed

    Non-Enterprise Standard Connection Types

    Other connection types are available on request.

    Projects With More Than 10 Datasources

    Power BI monitors

    Power BI monitors are pre-configured monitors to help you quickly begin monitoring common and critical aspects of your Power BI environment. For more information, see the Monitors documentation.

    This list contains all out of the box Datalogz Power BI monitors. Customisations can be made by cloning an existing monitor or on request.

    The default monitor catalog

    Control Tower ships 38 default Power BI monitors across the four pillars. Every monitor can be switched on or off in the Monitor Catalog, and cloned into My Monitors to tailor its logic. Grouped by what they protect:

    Refresh health (Performance): Failed Semantic Model Refresh, Chronic Refresh Failures, Refresh Processing Errors, Disabled Refresh Errors, Long-Running Refresh, Refresh Regression vs Baseline, Gateway Unavailability, Active Reports with Failed Refresh, Refresh Window Congestion, and Inactive Reports with Long Refresh (three duration bands).

    Unused content (Cost Management): Unused Reports, Unused Dashboards, Unused Semantic Models, Unused Snowflake Datasets, Unused Promoted or Certified Reports, and Unused Semantic Models with High Refresh.

    Stale content (Governance): Stale Reports, Stale Dataflows, and Stale Apps.

    Orphaned content (Governance): Orphaned Reports, Orphaned Dataflows, and Orphaned Semantic Models.

    Ownership (Governance): Unowned Reports, Unowned Dashboards, Reports with Multiple Owners, and Inactive Owner.

    Quality Standards (Governance): Semantic Model Measure Duplication, Reports Without Semantic Model, and Reports Using Pagination.

    Capacity (Cost Management, Performance): Personal Workspace on Capacity, and Low Report Count in Active Workspace.

    Security and activity: User Activity from Outside USA, Report Exports from Outside USA, Excessive Report Exports, High Personal-Workspace Activity, and High-Visibility Asset Protection.

    Selected monitors in detail:

    BI Pillar

    Governance

    Alert Type

    Asset-Based

    Description

    This monitor identifies Power BI dataflows where the user who owns the dataflow has been inactive for 30 days or longer. The purpose is to prevent the accumulation of unmanaged or forgotten data assets that can consume resources and pose governance risks.

    Potential Impact

    Increased resource consumption, cluttered workspaces, difficulty in auditing data lineage, potential for stale or inaccurate data being used in reports, and overall governance challenges.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Contact the dataflow owner: Reach out to the listed owner to confirm if the dataflow is still actively used or needed by any team or process.

    • Reassign ownership: If the original owner is no longer active or responsible, reassign ownership to an appropriate, active team member or service account.

    • Archive or delete: If the dataflow is confirmed to be obsolete, consider archiving it (if a retention policy exists) or deleting it to reduce clutter, free up capacity, and maintain workspace hygiene.

    BI Pillar

    Governance

    Alert Type

    Asset-Based

    Description

    This monitor identifies Power BI reports where the user who owns the report has been inactive for 30 days or longer. The purpose is to ensure that all critical Power BI reports have active ownership, facilitating timely updates and issue resolution.

    Potential Impact

    Stale or inaccurate reports being consumed, user confusion, wasted storage and processing resources, and a general decline in data governance and trust in reporting.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Contact the report owner: Get in touch with the listed owner to ascertain if the report is still actively used or required by stakeholders.

    • Reassign ownership: If the original owner is inactive or no longer responsible, reassign ownership to a current, active team member.

    • Archive or delete: If the report is confirmed to be obsolete, consider archiving it (if appropriate) or deleting it to streamline content and improve user experience.

    BI Pillar

    Governance

    Alert Type

    Asset-Based

    Description

    This monitor identifies Power BI semantic models whose designated owner has had no recorded activity within the Power BI service for the last 30 days. The purpose is to maintain a clean and efficient Power BI environment by ensuring all semantic models have active ownership.

    Potential Impact

    Accumulation of unnecessary data, potential for outdated data being used, increased storage costs, security risks from unmanaged data access, and overall degradation of data governance.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Contact the semantic model owner: Reach out to the listed owner to confirm if the dataset is still actively used or needed by any reports or dashboards.

    • Reassign ownership: If the original owner is inactive or no longer responsible, reassign ownership to an appropriate, active team member or service account.

    • Archive or delete: If the dataset is confirmed to be obsolete, consider archiving it (if applicable) or deleting it to reduce clutter, free up capacity, and maintain data hygiene.

    BI Pillar

    Security

    Alert Type

    Event-Based

    Description

    This monitor alerts when Power BI assets (reports, dashboards, datasets) are accessed from IP addresses located outside the United States. The purpose is to enhance data security and ensure compliance with geographical access policies.

    Potential Impact

    Data breaches, non-compliance with data residency regulations (e.g., GDPR, CCPA), unauthorized data access, and compromised intellectual property.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Review access patterns: Immediately investigate the specific user, asset, and time of access. Determine if international activity is expected (e.g., remote employees, legitimate business travel).

    • Validate business justification: For any international access, confirm that the user has a valid and documented business justification for accessing assets from that location.

    • Audit permissions: Review the user's group memberships and individual permissions to ensure they align with the principle of least privilege and company security policies. Remove access if unauthorized activity is confirmed.

    BI Pillar

    Security

    Alert Type

    Event-Based

    Description

    This monitor alerts when a single user exports 5 or more Power BI reports or dashboards within a one-hour period. The purpose is to identify potential data exfiltration attempts or excessive data downloads that might violate data governance policies.

    Potential Impact

    Unauthorized data disclosure, data exfiltration, compliance breaches, and potential misuse of sensitive business information.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Verify business purpose: Investigate the user and the specific reports/dashboards exported. Confirm that the individual has a legitimate business need and authorization to export data at this volume.

    • Review exported content: If possible, review the content of the exported reports/dashboards to assess data sensitivity.

    • Adjust access/permissions: If the activity is deemed unauthorized or excessive, adjust the user's permissions to restrict export capabilities or remove access if necessary.

    • Educate users: If the activity is legitimate but unusual, consider educating the user on best practices for data access and alternative methods for data consumption.

    Attribute

    Description

    BI Pillar

    Security

    Alert Type

    Event-Based

    Description

    This monitor alerts when Power BI reports are exported from IP addresses located outside the United States. The purpose is to monitor and control the outbound flow of data from Power BI, ensuring compliance with data residency and security policies.

    Potential Impact

    Data leakage, non-compliance with data protection regulations, unauthorized distribution of proprietary information, and potential legal repercussions.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Validate business justification: Verify that users exporting reports from outside the U.S. have a valid and documented business justification for doing so.

    • Review workspace access: Examine the workspace where the report resides and review the access permissions for all users, particularly those with export capabilities.<br/>Audit group permissions: Ensure that group permissions are strictly aligned with the principle of least privilege, restricting export functionality to only those who absolutely require it.

    • Implement data loss prevention (DLP): Consider implementing Power BI DLP policies to prevent sensitive data from being exported.

    BI Pillar

    Governance

    Alert Type

    Asset-Based

    Description

    This monitor identifies Power BI apps that have not been modified (e.g., content updates, settings changes) in the last 30 days. The purpose is to promote a clean and efficient Power BI environment by identifying and managing outdated or unused applications.

    Potential Impact

    Cluttered app workspaces, user confusion, decreased trust in available content, and inefficient resource allocation.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Contact the app owner: Reach out to the app owner to confirm if the app is still actively used or needed by its audience.

    • Reassign ownership: If the original owner is inactive or no longer responsible, reassign ownership to an appropriate active team member.

    • Archive or delete: If the app is confirmed to be obsolete, consider archiving it (if a retention policy exists) or deleting it to reduce clutter, improve user experience, and free up capacity.

    BI Pillar

    Governance

    Alert Type

    Asset-Based

    Description

    This monitor identifies Power BI dataflows that have not been modified (e.g., definition changes, query updates) for over 30 days. The purpose is to ensure dataflows remain relevant and actively managed, preventing the accumulation of outdated data transformation logic.

    Potential Impact

    Use of outdated data, potential data quality issues, increased complexity in data lineage, and inefficient use of Power BI capacity.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Contact the dataflow owner: Reach out to the dataflow owner to confirm if the dataflow is still actively used, required, or if its current state is intentional.

    • Reassign ownership: If the original owner is inactive or no longer responsible, reassign ownership to an appropriate active team member.

    • Archive or delete: If the dataflow is confirmed to be obsolete, consider archiving it (if applicable) or deleting it to reduce clutter, free up capacity, and maintain data hygiene.

    BI Pillar

    Governance

    Alert Type

    Asset-Based

    Description

    This monitor identifies Power BI reports that have not been modified (e.g., layout changes, filter updates, visual additions) for over 30 days. The purpose is to ensure that all Power BI reports remain current and relevant to user needs.

    Potential Impact

    Consumption of outdated information, user confusion, reduced confidence in reporting, and inefficient resource utilization.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Contact the report owner: Reach out to the report owner to confirm if the report is still actively used, required, or if its current state is intentional.

    • Reassign ownership: If the original owner is inactive or no longer responsible, reassign ownership to an appropriate active team member.

    • Archive or delete: If the report is confirmed to be obsolete, consider archiving it (if appropriate) or deleting it to streamline content and improve user experience.

    BI Pillar

    Governance

    Alert Type

    Asset-Based

    Description

    This monitor identifies Power BI reports that show low activity (e.g., few views, no recent interactions) over the past 30 days. The purpose is to optimize Power BI content by identifying reports that are no longer providing value and reducing clutter.

    Potential Impact

    Cluttered workspaces, decreased user efficiency in finding relevant reports, wasted storage, and potential for misinterpreting low usage as a lack of need for a similar report.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Consult the report owner: Check with the report owner to verify if the report is still needed for any specific purpose, even if activity is low.

    • Communicate with Users: If the owner is unsure, consider communicating with the intended audience to gauge their need for the report.

    • Archive or delete: If confirmed as no longer needed, archive or delete the report to declutter workspaces and optimize resources.

    BI Pillar

    Cost

    Alert Type

    Asset-Based

    Description

    This monitor identifies Power BI semantic models that connect to Snowflake data sources and have recorded no activity (e.g., refreshes, report usage) over the past 30 days. The purpose is to optimize data infrastructure and licensing costs associated with Snowflake connections.

    Potential Impact

    Unnecessary consumption of Power BI and Snowflake resources, increased complexity in data lineage, and potential for outdated data being retained.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Consult the model owner: Check with the dataset owner to verify if the semantic model is still needed for any reports, dashboards, or other data consumption.<br/>Review lineage: Confirm that no active reports or dashboards are dependent on this dataset.

    • Archive or delete: If confirmed as no longer needed, archive or delete the model to free up Power BI capacity and potentially reduce Snowflake query costs.

    BI Pillar

    Cost

    Alert Type

    Asset-Based

    Description

    This monitor identifies Power BI semantic models that show no activity (e.g., refreshes, associated report usage) over the past 30 days. The purpose is to optimize Power BI capacity and storage by identifying datasets that are no longer consumed by reports.

    Potential Impact

    Wasted Power BI capacity and storage, increased complexity in data management, and potential for outdated data being retained.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Consult the model owner: Check with the dataset owner to verify if the semantic model is still needed for any reports, dashboards, or other data consumption.

    • Review lineage: Confirm that no active reports or dashboards are dependent on this dataset.

    • Archive or delete: If confirmed as no longer needed, archive or delete the model to free up Power BI capacity.

    BI Pillar

    Governance

    Alert Type

    Asset-Based

    Description

    This monitor identifies Power BI reports that have been promoted or certified (indicating high importance or trustworthiness) but show low activity over the past 30 days. The purpose is to ensure that highly visible and trusted Power BI content is genuinely valuable and actively used.

    Potential Impact

    Dilution of trust in promoted/certified content, user confusion, inefficient resource allocation, and a perception that official content is not valuable.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Check for similar reports: Investigate if there is a similar report being used more frequently, which might be a preferred alternative.

    • Contact the report owner: Engage with the report owner to understand the reason for low usage. This could involve user feedback, changes in business needs, or discoverability issues.

    • Re-evaluate Promotion/Certification: If the report is genuinely unused, consider removing its promoted/certified status or, if necessary, archiving or deleting the report to maintain the integrity of trusted content.

    BI Pillar

    Governance

    Alert Type

    Asset-Based

    Description

    This monitor identifies Power BI dashboards that show low activity (e.g., few views, no recent interactions) over the past 30 days. The purpose is to optimize Power BI content by identifying dashboards that are no longer providing value and reducing clutter.

    Potential Impact

    Cluttered workspaces, decreased user efficiency in finding relevant dashboards, wasted storage, and potential for misinterpreting low usage.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Consult the dashboard owner: Check with the dashboard owner to verify if the dashboard is still needed for any specific purpose, even if activity is low.

    • Communicate with Users: If the owner is unsure, consider communicating with the intended audience to gauge their need for the dashboard.

    • Archive or delete: If confirmed as no longer needed, archive or delete the dashboard to declutter workspaces and optimize resources.

    BI Pillar

    Governance

    Alert Type

    Event-Based

    Description

    This monitor alerts when a Power BI semantic model fails to refresh specifically due to a processing error (ModelRefresh_ShortMessage_ProcessingError). The purpose is to ensure data freshness and reliability, as processing errors can lead to outdated reports and incorrect insights.

    Potential Impact

    Stale data in reports, inaccurate business insights, reduced trust in data, and potential operational disruptions if critical decisions rely on this data.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Review affected models: Access the Power BI service or Power BI Desktop to inspect the specific model that failed.

    • Check query and source Errors: Examine the Power Query Editor for any errors in data source connections, M queries, or data transformations.

    • Verify data availability: Ensure that the source data is accessible, correctly formatted, and contains expected values.

    • Assess capacity health: Check the Power BI capacity metrics for any resource constraints that might be causing processing issues.

    • Resolve and reattempt: After identifying and resolving the underlying issue, manually reattempt the dataset refresh and closely monitor the results.

    BI Pillar

    Governance

    Alert Type

    Event-Based

    Description

    This monitor alerts when a Power BI semantic model’s most recent scheduled or on-demand refresh attempt has failed, regardless of the specific error type. The purpose is to ensure continuous data freshness and reliability across all Power BI reports and dashboards.

    Potential Impact

    Outdated reports, inaccurate business insights, reduced user trust in data, and potential for critical business decisions to be made on stale information.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Investigate cause: Immediately access the dataset's refresh history in the Power BI service to view the specific error message and details.

    • Check data source availability: Confirm that all connected data sources are online and accessible from the Power BI service or gateway.

    • Verify credentials: Ensure that the credentials used for connecting to data sources are current and valid.

    • Review refresh configurations: Check the dataset's refresh settings, including schedule, gateway connections, and any incremental refresh policies.

    • Address underlying issues: Based on the error details, resolve any identified issues (e.g., network connectivity, data source changes, query syntax errors).

    • Restore scheduled updates: After resolution, manually trigger a refresh to confirm success, and ensure future scheduled updates will run correctly.

    BI Pillar

    Governance

    Alert Type

    Event-Based

    Description

    This monitor alerts when a Power BI semantic model fails to refresh due to the ModelRefreshDisabled error. The purpose is to prevent unintended data staleness caused by disabled refresh schedules and to ensure all active datasets are being updated as expected.

    Potential Impact

    Stale data in reports, reports showing incorrect or incomplete information, and a lack of awareness regarding critical data assets not being updated.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Verify if the disabling was intentional: First, confirm with the model owner or relevant team whether the refresh was intentionally disabled for maintenance, deprecation, or other reasons.

    • Re-enable refresh: If the disablement was unintentional or needs to be reversed, re-enable the scheduled refresh for the dataset in the Power BI service.

    • Check configurations & permissions: Ensure all dataset configurations (e.g., data source paths, gateway connections) and user permissions are correctly set up.

    • Document intentional disables: For models where refresh is intentionally disabled, ensure there is clear documentation (e.g., in Confluence, Jira) explaining the reason and expected duration to maintain visibility and prevent unnecessary alerts.

    BI Pillar

    Governance

    Alert Type

    Event-Based

    Description

    This monitor alerts when a Power BI semantic model fails to refresh due to an Enterprise Gateway error, indicating that the on-premises data gateway may be unavailable or unreachable. The purpose is to ensure continuous connectivity to on-premises data sources.

    Potential Impact

    Stale data in reports connected to on-premises sources, inability to refresh critical semantic models, disruption to business operations reliant on fresh data, and user frustration.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Check gateway status: Immediately verify that the on-premises data gateway service is running and online on the host machine.

    • Verify connectivity: Ensure stable network connectivity between the Power BI service and the gateway machine, and between the gateway and the on-premises data sources.

    • Update gateway: Confirm that the gateway software is up-to-date. Outdated versions can cause connectivity issues.

    • Restart gateway service: If no obvious issues are found, try restarting the "On-premises data gateway service" from Windows Services.

    • Enable proactive health alerts: Consider configuring proactive health monitoring and alerts for the gateway itself to detect future outages or performance issues early.

    BI Pillar

    Governance

    Alert Type

    Asset-Based

    Description

    This monitor alerts when Power BI reports are detected without an associated semantic model, which can indicate a broken data lineage or incomplete report configuration. The purpose is to ensure data lineage integrity and maintain the functionality of Power BI reports.

    Potential Impact

    Non-functional reports, inaccurate data lineage, user frustration, and difficulty in managing and auditing Power BI content.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Identify missing datasets: Identify the intended semantic model for the report and reconnect it by re-publishing the report from Power BI Desktop.

    • Investigate publishing process: Review the process by which reports are published to prevent future instances of missing dataset.

    BI Pillar

    Governance

    Alert Type

    Asset-Based

    Description

    This monitor alerts when a Power BI semantic model has not been refreshed in the last 30 days. The purpose is to proactively identify datasets that may be providing outdated information to reports and dashboards, ensuring data freshness and reliability for critical business insights.

    Potential Impact

    Stale data leading to incorrect business decisions, reduced trust in Power BI reports, and a lack of awareness regarding data quality issues.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Review refresh activity: Examine the semantic model’s refresh history in the Power BI service to understand why refreshes haven't occurred.

    • Confirm schedule configuration: Verify that the refresh schedule is correctly configured and enabled.

    • Investigate underlying issues: Look for potential issues such as: broken data source connections, permission errors, capacity limitations, or gateway issues.

    • Resolve and monitor: Address any identified issues and then monitor the dataset to ensure refreshes resume as expected.

    BI Pillar

    Performance

    Alert Type

    Event-Based

    Description

    This monitor alerts when the refresh process for a Power BI semantic model (dataset) takes longer than 30 minutes to complete. The purpose is to optimize Power BI capacity utilization and ensure timely data availability, as slow refreshes can impact the freshness of data and overall system performance.

    Potential Impact

    Delayed data availability, reduced data freshness, increased load on Power BI capacity, and potential for refresh failures if timeouts are exceeded.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Investigate performance bottlenecks: Check data source performance, review Power Query (M) steps for inefficiencies, and optimize DAX measures.

    • Incremental refresh: Consider implementing incremental refresh for large datasets to process only new or changed data.

    • Gateway performance: If using an on-premises gateway, check its resource utilization.

    • Capacity resources: Monitor Power BI Premium capacity metrics for any resource constraints (CPU, memory).

    • Discuss with owner: Collaborate with the dataset owner to identify and implement ways to improve the refresh performance.

    BI Pillar

    Performance

    Alert Type

    Asset-Based

    Description

    This monitor alerts when Power BI reports are identified as paginated reports (RDL reports). The purpose is to identify reports that may be resource-intensive or offer a suboptimal interactive user experience, as standard Power BI reports are generally preferred for interactive data exploration.

    Potential Impact

    Suboptimal user experience for interactive analysis, higher resource consumption for rendering, and potentially slower performance compared to standard reports for ad-hoc queries.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Assess use case: Confirm if the report's primary purpose truly requires a static, pixel-perfect layout (e.g., invoices, compliance documents).

    • Consider standard report: If interactivity and dynamic data exploration are preferred, evaluate rebuilding the content as a standard Power BI report or dashboard.

    • Educate users: Inform users about the differences between paginated and standard reports to ensure they choose the most appropriate tool for their needs.

    BI Pillar

    Governance

    Alert Type

    Asset-Based

    Description

    This monitor alerts when a Power BI report with no user activity in the last 30 days has an underlying semantic model whose average refresh duration is between 60 and 120 minutes.

    Potential Impact

    Refreshing unused datasets can lead to unnecessary compute and storage costs, reduce overall system efficiency due to long-running refresh operations, and create additional operational overhead in maintaining reports or data models that deliver little to no value.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Review refresh activity: Check the semantic model's refresh history in the Power BI Service to understand why refreshes are long or continuing despite inactivity.

    • Confirm schedule configuration: Ensure that the refresh schedule is correctly configured, still required, and not enabled by default for unused content.

    • Confirm whether the report and its underlying dataset are still needed. If not:

      • Optimize the dataset to reduce refresh time

      • Lower refresh frequency

      • Archive or delete the report or dataset to remove unnecessary workloads

    BI Pillar

    Governance

    Alert Type

    Asset-Based

    Description

    This monitor alerts when a Power BI report with no user activity in the last 30 days has an underlying semantic model whose average refresh duration is between 120 and 180 minutes.

    Potential Impact

    Refreshing unused datasets for two to three hours at a time can lead to significantly higher compute and storage costs, reduce system efficiency due to extended refresh operations, and increase operational overhead in maintaining reports or data models that are unlikely to deliver meaningful value.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Given the extended refresh duration, we strongly recommend reviewing the semantic model's transformation logic, assessing whether refresh frequency can be reduced, and determining whether the associated reports or models should be optimized, archived, or removed.

    • Review refresh activity: Check the semantic model's refresh history in the Power BI Service to understand why refreshes are long or continuing despite inactivity.

    • Confirm schedule configuration: Ensure that the refresh schedule is correctly configured, still required, and not enabled by default for unused content.

    BI Pillar

    Governance

    Alert Type

    Asset-Based

    Description

    This monitor alerts when a Power BI report with no user activity in the last 30 days has an underlying semantic model whose average refresh duration is greater than 180 minutes.

    Potential Impact

    Refreshing unused datasets for more than three hours at a time leads to significantly higher compute and storage costs, reduces system efficiency due to extended refresh operations, and increases operational overhead in maintaining reports or data models that are unlikely to deliver meaningful value.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Given the extended refresh duration, review the semantic model’s transformation logic, evaluate whether the refresh frequency can be reduced, and determine whether the associated reports or models should be optimized, archived, or removed.

    • Assess whether the semantic model can be modularized or split into smaller components, and adjust refresh schedules based on how frequently each portion of the data is actually needed.

    • Review refresh activity in the Power BI Service to understand why refreshes are taking so long and why they continue despite a lack of user engagement.

    • Confirm that the refresh schedule is correctly configured, still necessary, and not enabled by default for unused or deprecated content.

    BI Pillar

    Governance

    Alert Type

    Asset-Based

    Description

    This monitor alerts when a Power BI report shows user activity but is backed by a semantic model whose most recent refresh has failed. This indicates that users may be viewing outdated or incomplete data.

    Potential Impact

    A failed semantic model refresh can result in users accessing stale or inaccurate information, reduces trust in BI outputs, causes delays in decision-making, and increases operational overhead as teams troubleshoot broken refresh pipelines.

    Recommendation

    We recommend the following actions to improve the health of your BI system:

    • Investigate the semantic model's refresh history to identify the failure point and see if the semantic model fails often.

    • Check gateway connectivity, credentials, and data source availability.

    • Review capacity load and any long-running queries that may be contributing to the failure.

    • Retry the refresh during off-peak hours.

    • Optimize data sources or transformation steps to reduce refresh duration and instability.

    • Adjust the refresh schedule to minimize system strain and avoid peak usage periods.

    Monitor details

    Orphaned Power BI Dataflows

    Orphaned Power BI Reports

    Orphaned Power BI Datasets

    User Activity From Outside of the USA

    Other regions are available on request.

    Power BI User High Hourly Exports

    Power BI Report Exported from Outside of the USA

    Other regions are available on request.

    Stale Power BI Apps

    Stale Power BI Dataflows

    Stale Power BI Reports

    Unused Power BI Reports

    Unused Power BI Snowflake Datasets

    Other data sources are available on request.

    Unused Power BI Datasets

    Unused Promoted or Certified Power BI Reports

    Unused Power BI Dashboards

    Datasets Failed Refresh Due to Processing Error

    Failed Power BI Refreshes

    Failure from Disabled Dataset Refresh

    Error From Unavailable Enterprise Gateway

    Reports with Missing Dataset

    Datasets with No Recent Refresh

    Slow Dataset Refresh

    Reports that Use Pagination

    Inactive Reports with Dataset Refresh between 1 and 2 hours

    This monitor reports only on semantic models that use Import mode. Models using DirectQuery or Live Connection refresh on a query-driven frequency rather than a scheduled dataset refresh, and therefore fall outside the scope of this monitor.

    Inactive Reports with Dataset Refresh between 2 and 3 hours

    This monitor reports only on semantic models that use Import mode. Models using DirectQuery or Live Connection refresh on a query-driven frequency rather than a scheduled dataset refresh, and therefore fall outside the scope of this monitor.

    Inactive Reports with Heavy Dataset Refresh greater than 3 hours

    This monitor reports only on semantic models that use Import mode. Models using DirectQuery or Live Connection refresh on a query-driven frequency rather than a scheduled dataset refresh, and therefore fall outside the scope of this monitor.

    Reports with Failed Dataset Refresh (with activity)