Encryption of Parameter value in Power BI desktop

[Anonymous]

HI All, 

Is there any way to enable encryption or Data masking for Values which are stored in parameter in Power BI. The reason behind is to not expose senistive information even if offline report is been downloaded from service?

Yes, we can restrict access for downloading report in workspace but Just want to know about the options available for data encryption or Data masking in the values which are stored in Report parameter. 

Thanks

[v-henryk-mstf]

Hi @Anonymous ,

If @ImkeF  answered your question, you can also refer to the following blog content. If there is still a problem, please point it out and I will answer it for you as soon as possible.

Encrypting Values in Power BI - Power BI (powerbi-pro.com)

Best Regards,
Henry

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[amitchandak]

@Anonymous , refer if this blog can help you

https://radacad.com/secure-the-sensitive-data-in-power-bi-data-masking-better-with-row-level-security

[Anonymous]

HI @amitchandak 

Thanks for quick Response. 

Would like to know about the feasibility of encrypting the values stored in parameter. In some scenario when we used to integrate our Power BI solution with API then for calling API , we may require Client ID and secret but storing those details in Power BI as parameter or Hard coding in M code for any table will expose sensitive information to others. (if we download offline version of report )

if any feature is available by which we can do encryption of those values without breaking API integration , would be really helpful in this scenario. 

[amitchandak]

@Anonymous , need to check with M experts. @ImkeF , can you help with this.

[ImkeF]

Hi @Anonymous ,
I don't think this is possible. And the resulting http requests won't be encrypted at the end.
Currently, only the credentials that are passed via the native authentication methods are going to be encrypted in the web.

[Anonymous]

Hi @ImkeF 

Thanks for you response. 

Is there any Feature avaialble in Power BI desktop by which we can encrypt configuration related information?

For Importing data though API , we would requires Client ID and secret those details used to be there in report in terms of Function to get API token or in terms of Report parameters or directly in query in advanced editor we need to configure. These information wont display to end user if they have only Viewer access in workspace. 

Is there any way to programatically configure these values(client ID, client secret etc) without storing in report ?

Thanks

[ImkeF · Accepted solution]

Hi @Anonymous ,
a pragmatic way would be to move the Power Query part to a dataflow.
You could even move that dataflow to a different workspace where all but you have only read access to.

Otherwise you could consider storing the PW (or parts of it) in an external document and then import that. However, will only refresh in the service if you find a way to circumvent possible dynamic datasoure problems. Further reading for it here: Dynamic Web.Contents() and Power BI Refresh Errors – Data Inspirations

Or, if you do it in a dataflow, then Power Platform dataflows allow to refresh with dynamic datasources (Power BI dataflows don't).