Forum Discussion
Turn Off Data Export
Is there a way to turn off the new data export feature for a particular data set? There is some sensitive data we have on PowerBI and we want people to have access to reports from this data but we don't want them to be able to download the data.
Thanks, Hanna
15 Replies
Also, is there a way to allow export of summarized data, but restrict underlying data?
As mentioned above, there would be no point in restricting the export of data that is already on the sceen, but the underlying data shows more than what is on the screen.
Hi wynhopkins!
Is this a PowerBI Premium exclusive option or is this control available to PRO users?
Thank you!Available to all with Power BI admin status
There's no way to disable this in the service presently. You may have more flexibility when embedding visuals in another application using the PBI API.
I do have a question, though. Do you intend to block users from printing, screen-shotting, or viewing the reports with a pen and paper in hand?
I am not being glib, but very serious. What attack vector are you mitigating by stopping export to Excel? What users do you have who you trust to have access to this sensitive data on demand, on any internet enabled device, but not with the ability to export the very thing on the screen (that they can print or screen cap) into Excel.
I understand that security is important, and the fact that exploits still exist doesn't mean you should ignore those you can control, but it seems a bit superfluous to focus on export to Excel functionality in a tool as readily accessible as Power BI. If they can't be trusted with Excel, I don't see why you'd trust them with Power BI in general.
The question becomes one of traceability, as well as one of corporate discovery. Given the potential sensitivity of data being manipulated via the download capability to a device not controlled by a corporate process (ie BYOD) what controls exist to disable the ability to download from the mobile application?
The question is two fold. First, it's a question of data leakage. How we map controls to an application are important attestation points. Second, it's a question of corporate discovery of a personal device (in the BYOD) world.
The question is: for the mobile application, what options are available to differentiate a device using the mobile application that is authorized as a part of corporate device management, vs a non managed personal device to be able to effect download exclussion of the latter?
I realize this is an old question, but seeing as it's still not possible to remove the underlying data export option, I thought I'd share my 2 cents.
It's a bit of a work around, but I was able to achieve a similar result by hiding the table on Power BI desktop. It won't remove the data export option, but doing this will limit the data export to what is visible on your visuals in the Power BIservice (PowerBI.com).
it is possible to turn off now
