Restrict Publishing from Desktop to Service

[Anonymous]

I'm being asked to restrict the ability of a desktop user to publish to the PBI service. Only a few developers should have publish authority. I know we can restrict app workspaces, apps, etc. but the request it to totally prevent desktop users from publhishing, even to their own "My Workspace." Any ideas? 

[STollaf]

We have the same need.  As we are only at 60 users, premium is a hefty price to pay for a little control. 

Is there even anyway to know if someone has published something to their own workspace?  That actually doesn't bother us so much, it's when they share it with others.  Now we have data spreading that has not been confirmed against our governance policies.  

[cnschulz]

This is a massive security problem for us. Are there any updates other than to buy another product (premium)?

[Anonymous]

@Anonymous,

A workaround is to disable sign ups for Power BI, this way, users can't publish PBIX file to Power BI Service. There is a similar thread for your reference.

Regards,
Lydia

[Anonymous]

But we want the information consumers to use Power BI service, just not have the ability to publish anything there. If we disable sign in are we not also preventing them from consuming content on the service?

[Anonymous]

@Anonymous,

Yes. Please submit an feature request in Power BI ideas forum about preventing users from publishing PBIX file.

https://ideas.powerbi.com/forums/265200-power-bi-ideas 

Regards,
Lydia

[Anonymous · Accepted solution]

Microsoft rep got back with a solution. In short, upgrade to Premium service and remove all Pro licenses except keep developers as Pro. That way free users can consume through the service but cannot publish or share. We were not ready to move to Premium but it appears that is the only option. 

[LivioLanzo]

Hi @Anonymous

I was wondering if this would disable publishing to 'My Workspace' for Free Users ?

[Anonymous]

@LivioLanzosorry I missed your post. I'm not sure if it would disable free user publishing to "My Workspace" but according to Microsoft it would achieve our objectives since free users cannot share. We plan to get premium service, go to free licenses for all users except a handful of BI developers with Pro licenses. 

[LivioLanzo]

i am not sure if such setting exists, you need to check in the Admin Portal, but you can always prevent certain users from sharing

[Anonymous]

No setting exists in admin portal. There is no way for me to prevent users from sharing content ineternally that they publsihed to their own workspace. We are trying to use Power BI service for IT-authored, certified, reporting. I know...this goes against the decentralized approach of Power BI.