Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

The ultimate Microsoft Fabric, Power BI, Azure AI & SQL learning event! Join us in Las Vegas from March 26-28, 2024. Use code MSCUST for a $100 discount. Register Now

Reply
qp_andy
Frequent Visitor

Security

Scenario: User has a desktop pro licence at Organisation A, as well as a personal O365 business subscription with Power BI.

Question: What security controls exist to stop that user publishing content from Organisation A into their own workspace on their own subscription?
6 REPLIES 6
v-joesh-msft
Solution Sage
Solution Sage

Hi @qp_andy ,

I'm a little confused by your description. Do you mean to restrict user A's permission to create reports in the workspace? If so, click Access in the workspace to set the user role to Viewer. Roles let you manage who can do what in a workspace, so teams can collaborate. New workspaces allow you to assign roles to individuals, and to user groups: security groups, Office 365 groups, and distribution lists. For more information, please refer to the documentation: 

Organize work in the new workspaces in Power BI

21.PNG22.PNG

Best Regards,

Community Support Team _ Joey
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

 

Let me try and make it clearer. There is one user (lets called him Dean) who has his own small IT company (Company A). Company A has an O365 Business subscription, and Dean is the admin and only user (Dean@CompanyA.com). He has a Power BI free user licence on this account so can create in Desktop and publish to his own workspace on PBI service.

 

Company B hires Dean to work on a Power BI project. Company B creates an AAD user account for Dean (Dean@companyB.com) so he can work on their network, and grants a PBI desktop pro licence with his Company B credentials. Dean creates and publishes content using his Dean@companyB.com credentials. All good.

 

BUT....

 

What is stopping Dean logging in to Company B's network (Dean@companyB.com), creating content in PBI Desktop using Company B's data, then logging into the PBI service using his Dean@CompanyA.com account and publishing that content to the Comany A workspace?

Hi @qp_andy ,

Power bi cannot limit which account the user uses to publish the report. If you want users to be unable to see content including data and reports on other networks, you can use DirectQuery or Live connection mode to connect to data or connect to a data source such as DataFlow.

Best Regards,

Community Support Team _ Joey
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Seems a major flaw that there is no way to limit the domains/accounts being published to in power bi service, based on the windows account the publisher is logged into? Yes it will all be logged retrospectively, but by then it’s too late....

But this flaw is not specific to Power BI, there is also nothing stopping "dean" from downloading company B's data to csv files and then copying them to a usb drive or uploading them to dropbox, google drive or any of the cloud base file services. 

Hi @d_gosbell 

 

Thanks but that's a subtly different point - there could be endpoint security on the device to lock down all of the ports for example.

 

My main point is there should be a control available to admins that they can set, that compares the domain someone is publishing from, to the domain they are publishing to, and allow/disallow publishing based on the rules set. Unless I'm missing something, this doesn't exist.

 

 

 

Helpful resources

Announcements
Fabric Community Conference

Microsoft Fabric Community Conference

Join us at our first-ever Microsoft Fabric Community Conference, March 26-28, 2024 in Las Vegas with 100+ sessions by community experts and Microsoft engineering.

February 2024 Update Carousel

Power BI Monthly Update - February 2024

Check out the February 2024 Power BI update to learn about new features.

Fabric Career Hub

Microsoft Fabric Career Hub

Explore career paths and learn resources in Fabric.

Fabric Partner Community

Microsoft Fabric Partner Community

Engage with the Fabric engineering team, hear of product updates, business opportunities, and resources in the Fabric Partner Community.