Forum Discussion

qp_andy's avatar
qp_andy
Frequent Visitor
6 years ago

Security

Scenario: User has a desktop pro licence at Organisation A, as well as a personal O365 business subscription with Power BI. Question: What security controls exist to stop that user publishing conte...
Need Help
v-joesh-msft's avatar
v-joesh-msft
Solution Sage
6 years ago

Hi qp_andy ,

Power bi cannot limit which account the user uses to publish the report. If you want users to be unable to see content including data and reports on other networks, you can use DirectQuery or Live connection mode to connect to data or connect to a data source such as DataFlow.

Best Regards,

Community Support Team _ Joey
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

qp_andy's avatar
qp_andy
Frequent Visitor
6 years ago
Seems a major flaw that there is no way to limit the domains/accounts being published to in power bi service, based on the windows account the publisher is logged into? Yes it will all be logged retrospectively, but by then it’s too late....
  • d_gosbell's avatar
    d_gosbell
    Super User
    6 years ago

    But this flaw is not specific to Power BI, there is also nothing stopping "dean" from downloading company B's data to csv files and then copying them to a usb drive or uploading them to dropbox, google drive or any of the cloud base file services. 

    • qp_andy's avatar
      qp_andy
      Frequent Visitor
      6 years ago

      Hi d_gosbell 

       

      Thanks but that's a subtly different point - there could be endpoint security on the device to lock down all of the ports for example.

       

      My main point is there should be a control available to admins that they can set, that compares the domain someone is publishing from, to the domain they are publishing to, and allow/disallow publishing based on the rules set. Unless I'm missing something, this doesn't exist.