Forum Discussion
Best Practices for Data Encryption and Decryption in Power BI
Hi ZiyadSyauqi ,
According to a statement in the Power BI security white paper:
https://learn.microsoft.com/en-us/power-bi/guidance/whitepaper-powerbi-security
By default, all data retained by Power BI is encrypted using Microsoft-managed keys. Customer data stored in Azure SQL databases is fully encrypted using Azure SQL's Transparent Data Encryption (TDE) technology. Customer data stored in Azure Blob Storage is encrypted using Azure Storage Encryption.
In addition, organizations can use Power BI Premium to encrypt static data imported into the semantic model using their own keys. This method is often described as Bring Your Own Key (BYOK). Utilizing BYOK helps ensure that customer data is not exposed even in the event of a service operator error-something that cannot be easily achieved using transparent server-side encryption. For more information, see Bring Your Own Encryption Key for Power BI.
Best Regards,
Liu Yang
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
Hi ZiyadSyauqi ,
According to a statement in the Power BI security white paper:
https://learn.microsoft.com/en-us/power-bi/guidance/whitepaper-powerbi-security
By default, all data retained by Power BI is encrypted using Microsoft-managed keys. Customer data stored in Azure SQL databases is fully encrypted using Azure SQL's Transparent Data Encryption (TDE) technology. Customer data stored in Azure Blob Storage is encrypted using Azure Storage Encryption.
In addition, organizations can use Power BI Premium to encrypt static data imported into the semantic model using their own keys. This method is often described as Bring Your Own Key (BYOK). Utilizing BYOK helps ensure that customer data is not exposed even in the event of a service operator error-something that cannot be easily achieved using transparent server-side encryption. For more information, see Bring Your Own Encryption Key for Power BI.
Best Regards,
Liu Yang
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
i have encrypted data in snowflake can i decrypt in power bi service on the fly while i use direct query or can i achive by having udf at report server level .as of now i use cognos bi and snowflake encrypted data where i am creating udf to decrypt on the fly in cognos while using direct query .need same functionality in power bi can we do it with byok pls confirm
