Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
8 years ago
Solved

Custom Visualization Data Security Issues

Hello,

 

In the description of every Custom visualization that is on the https://appsource.microsoft.com, it says that the visualization can send data through the Internet.

 

What data is being sent? Isn't it a severe breach of data confidentiality? 

If I make reports and dashboards inside my Organization, doesn't it leaks?

 

I would appreciate your answers,

 

Thanks,

Tamir

General Comment
  • v-viig's avatar
    v-viig
    8 years ago

    Certified custom visuals and custom visuals developed by Microsoft don’t send any data over internet. Such custom visuals can be used for sensitive data.

    However, we can’t be sure about other third party not-certified custom visuals.

     

    Ignat Vilesov,

    Software Engineer

     

    Microsoft Power BI Custom Visuals

    [email protected]

  • v-viig's avatar
    v-viig
    8 years ago

    Some custom Visuals might send data to third-party services for additional analytics.

    We'd recommned to contact developers of custom visuals to ask what data their CVs send.

     

    We'd also recommend to use certified CV. Tag certified means that we have not find any security issues and sending data to 3rd party services.

     

    Ignat Vilesov,

    Software Engineer

     

    Microsoft Power BI Custom Visuals

    [email protected]

12 Replies

  • Anonymous's avatar
    Anonymous
    Not applicable
    8 years ago

    Hi Anonymous,

     

    >>What data is being sent? Isn't it a severe breach of data confidentiality? 

    For power bi data security, you can refer to following article:

    POWER BI AND DATA SECURITY – COMPLIANCE AND ENCRYPTION

     

    >>In the description of every Custom visualization that is on the https://appsource.microsoft.com, it says that the visualization can send data through the Internet.

    Do you means the origination content pack? If this is a case, all receivers has the similar data access permission as owner.

    You can also take a look at below link to know more about content pack:

    Intro to organizational content packs in Power BI

     

    Data security

    All distribution group members have the same permissions to the data as the content pack creator. The one exception to this is SQL Server Analysis Services (SSAS) on-premises tabular datasets. Because the reports and dashboards are connecting live to the on-premises SSAS model, the credentials of each individual distribution group member are used to determine the data he or she can access.

     

    BTW, you can add dynamic rls on your report to improve data security level:

    RLS with UserName()

     

     

    Regards,
    Xiaoxin Sheng

    • Anonymous's avatar
      Anonymous
      Not applicable
      8 years ago

      Hi Anonymous

       

      Thank you for your detailed answer. I will go thoroughly over it.

      However, I was referring to something a little bit different.

      Please see a snapshot: (blue circle)

       

      Thank you,

      Tamir

      • Anonymous's avatar
        Anonymous
        Not applicable
        8 years ago

        Hi Anonymous,

         

        I'm also not clarity for this, maybe you can try to contact to power bi custom visual team for further support.

         

        Regards,

        Xiaoxin Sheng