Forum Discussion

SuriPowerBI's avatar
SuriPowerBI
Regular Visitor
1 year ago
Solved

How to prevent access to underlying data - while Publishing power BI reports to public

Hi all, We prepare power BI reports using the sensitive record level data. we publish public health summary visuals to public (currently  using power BI pro publish to web public method)  I like to ...
  • v-veshwara-msft's avatar
    1 year ago

    Hi SuriPowerBI ,
    Thanks for reaching out to Microsoft Fabric Community,

     

    When using Publish to Web in Power BI, there are no built-in controls to restrict access to the underlying dataset. Even if visuals only display aggregated values, the entire data model behind the report is exposed. Users can potentially extract data using browser tools or third-party methods, which poses a risk when working with sensitive or detailed records.

     

    Recommended Approach:
    1. Create a summary-only semantic model
    Build a separate Power BI dataset that includes only the aggregated data you intend to publish. For example, summaries by age group, condition, geography, etc. with any identifiable or granular data excluded. This way, even if someone accesses the dataset behind the report, they only see public-level information.

     

    2. Automate the summary logic in Power Query
    To avoid creating multiple tables manually (e.g. 12 conditions × 8 summary tables), use Power Query functions or parameterized queries. These can generate the required summaries dynamically and reduce duplication across conditions.

     

    3. Avoid using detailed datasets with Publish to Web
    Using a semantic model does not prevent data access if the model includes sensitive fields. Once published to web, the report and its model are publicly accessible, regardless of any hidden fields or visuals.


    If you need more control but still want to share insights externally, consider:

    Power BI Embedded with authentication

    Secure embed or app sharing using AAD-based access

    These options allow broader access while maintaining data protection.

     

    Hope this helps. Please reach out for further assistance.
    If this post helps, then please consider to Accept as the solution to help the other members find it more quickly and a kudos would be appreciated.

     

    Thank you.