Best practices + reference architecture to setup a central Power BI gateway (scalable and secure)

[mmossel]

Situation: in an organization several people have set up or plan to access or send data to our Power BI platform a private Power BI gateway. Usually the questions were: I have a connection to the PowerBI platform, it looks like "this" and is it safe?

There are at least 3 problems with this:
- Potentially insecure connections
- Sprawl of all kinds of connections to the data platform
- Not a sustainable situation

Therefore we aim to consolidate and centralize this capability in something that is secure, scalable and manageable. For that we are in need of best practices and a reference architecture. We'd much appreciate your help on that!

[amitchandak · Accepted solution]

@mmossel , Please refer to this guide.

https://aka.ms/PBIEnterpriseDeploymentWP

These are quite steps related to gateway there.

Few are. But you need more, check if that document can help

1. Gateway should be on machine or VM, that is part of your VPN

2. Gateway should have access to all your on-premise gateways. Check what Database(cloud) do not need gateway

3. Make sure you have a service account for the gateway

4. Make sure IP access are limited