Consuming always encrypted column data using KeyVault

wizbang — Wed, 05 Apr 2023 13:29:39 GMT

Hi all,

I need to build a paginated report in a premium workspace to consume data from Azure SQL database with always encrypted columns. These columns are encrypted using keys in KeyVault. I've read through a number of articles:

Bring your own encryption keys for Power BI - Power BI | Microsoft Learn

Despite switching on BYOK and adding my keyvault key, I keep getting the message 'power bi report invalid key store provider name azure_key_vault' when trying to consume the encrypted columns.

After completing the steps in the linked article and running Get-PowerBICapacity -Scope Organization, it displays as:

Id : xxxxxx
DisplayName : Premium Per User - Reserved
Admins :
Sku : xxx
State : Active
UserAccessRight : Admin

I note that above, the display name is Premium Per User - Reserved, yet our licenses are only Power BI pro. Could this be a limitation of the license? The reports work fine reading from that database for non encrypted columns

Any advice would be appreciated

Regards,

Region : Australia East
EncryptionKeyId : 09cba11c-1ddc-4c6e-8651-d8be0510055a
EncryptionKey :

Re: Consuming always encrypted column data using KeyVault

wizbang — Wed, 05 Apr 2023 13:39:52 GMT

I forgot to mention, that the paginated report was originally created in SSRS as an RDL and was published to Power BI. Not sure if that makes a difference

topic Consuming always encrypted column data using KeyVault in Report Server

Consuming always encrypted column data using KeyVault

Re: Consuming always encrypted column data using KeyVault