Forum Discussion
Web API - how secure is the Key if it is placed here?
Hi Anonymous,
I see, hopefully this article https://docs.microsoft.com/de-de/power-bi/whitepaper-powerbi-security will help. The for you relevant part starts at https://docs.microsoft.com/de-de/power-bi/whitepaper-powerbi-security#data-at-rest.
Hi Anonymous,
if you want to save a token in a secure form, use the Web data connector in PowerQuery and set the Web API key. It will be stored in your User Profile. If you send this PBIX file to somebody else, they have to set the token again.
It is well described in the following article: https://blog.crossjoin.co.uk/2014/03/26/working-with-web-services-in-power-query/
Thank you for the info. This is helpful, but for us, it is not a complete or "official" answer.
I have seen that blog. We are using Web API with the key, and assume it is best practrices and "secure", but we don't actually know waht theat means or how it works:
where is the key stored? how is it stored?
when someone downloads the workbook from PBIS, can they see the key in the workbook?
Thanks for the help, but we are looking for official documentation from MSFT on storing keys and keeping them secure --> secrets management in PBID (PBIX) and PBIS.
Thanks for the reply, this is useful, but we would like to get official documentation so we can be certian.