Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Earn the coveted Fabric Analytics Engineer certification. 100% off your exam for a limited time only!

Reply
Nico78
Frequent Visitor

Bring your own key with Premium per User License

Hello BI Community,

 

i'm in struggle with getting informations to the ability for "bring your own key" (BYOK) with the premium per user license. 

We actually have the pro per user license because we only have a few users in our company. So the premium per capacity license is too expensive. 

Nearly all sources i found to this topic say that BYOK is not an option within the PPU license.

 

Nico78_0-1647248831119.png

 

Now the official Microsoft Premium Per User page says that there is a possible way to use BYOK:

 

Nico78_1-1647248912167.png

 

I can't find any more information about it than this. 

I don't know if it's a new option or something but maybe i can find someone here who has a bit of information for me. 

 

The main questions are:

1. is it at least possible to bring your own key with the PPU license?

2. if yes, are there some limitations i have to know about?

 

Thanks for all replies

Nico

 

1 ACCEPTED SOLUTION
v-yalanwu-msft
Community Support
Community Support

Hi, @Nico78 ;

I think  You may not be getting it right,Not everyone in the tenant needs to have a PPU, but the Settings need to be turned on in the tenant.

You enable BYOK at the tenant level with PowerShell, by first introducing to your Power BI tenant the encryption keys you created and stored in Azure Key Vault.
 To enable BYOK, you must be a Power BI admin, signed in using the Connect-PowerBIServiceAccount cmdlet. 

https://docs.microsoft.com/en-us/power-bi/enterprise/service-encryption-byok


Best Regards,
Community Support Team _ Yalan Wu
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

View solution in original post

4 REPLIES 4
jeroenmaes
New Member

As Yalan Wu said, you can only enable this at the tenant level when using Premium Per User.

With Powershell I had to use the '-Default' and '-Activate' flags to get this working:

 

Add-PowerBIEncryptionKey -Name 'xxxxx' -KeyVaultKeyUri 'yyy' -Activate -Default

 

 

Without '-Activate' and '-Default' the request always resulted in a BadRequest:

jeroenmaes_0-1671100835989.png

v-yalanwu-msft
Community Support
Community Support

Hi, @Nico78 ;

I think  You may not be getting it right,Not everyone in the tenant needs to have a PPU, but the Settings need to be turned on in the tenant.

You enable BYOK at the tenant level with PowerShell, by first introducing to your Power BI tenant the encryption keys you created and stored in Azure Key Vault.
 To enable BYOK, you must be a Power BI admin, signed in using the Connect-PowerBIServiceAccount cmdlet. 

https://docs.microsoft.com/en-us/power-bi/enterprise/service-encryption-byok


Best Regards,
Community Support Team _ Yalan Wu
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Nico78
Frequent Visitor

Thanks for replying Yalan Wu.

 

does "enabled across the entire tenant" mean that every user has to have a PPU license? 

 

Nico 

v-yalanwu-msft
Community Support
Community Support

Hi, @Nico78 ;

Nico78_1-1647248912167.png

 

The main questions are:

1. is it at least possible to bring your own key with the PPU license?

2. if yes, are there some limitations i have to know about?


For me, I think official documentation is more trustworthy, with real-time information and feature updates. According to the documentation,Premium Per User (PPU) only supports BYOK when it's enabled across the entire tenant.”

which indicates that the PPU is supported. But the requirement is to enable across the entire tenant.

 

so I found a documentation about Tenant settings guidance; here has about Block ResourceKey Authentication setting.

vyalanwumsft_0-1647498525696.png

https://docs.microsoft.com/en-us/power-bi/guidance/admin-tenant-settings

https://docs.microsoft.com/en-us/power-bi/enterprise/service-encryption-byok


Best Regards,
Community Support Team _ Yalan Wu
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Helpful resources

Announcements
April AMA free

Microsoft Fabric AMA Livestream

Join us Tuesday, April 09, 9:00 – 10:00 AM PST for a live, expert-led Q&A session on all things Microsoft Fabric!

March Fabric Community Update

Fabric Community Update - March 2024

Find out what's new and trending in the Fabric Community.

Top Solution Authors
Top Kudoed Authors