Hello community members - We have a scenario where the connection need to be established from Power BI (using Service Account) to Azure SQL server (having Always Encrypted column) and retrieve decrypted values using the key stored in Azure Key Valut. The approach Microsoft recommends is to store the connection string & key value on the VM registry where the Power BI gateway lives and use ODBC connection. However, due to security reasons we would not be able to take the registry approach. Any other recommendations to obtain the key value directly from Azure Key Vault and pass it on to sql connection dynamically from Power BI? It's bit surprising that hardcoding in registry would be the only solution to read always encrypted values from Sql Server!
