Direct access for Power BI reports and enforcing VPN connection

Hi sba_ur ,

Thank you for your follow-up question. Although Power BI and Microsoft Fabric do not provide a native workspace-level option to limit access by geographic location, you can achieve this by implementing Microsoft Entra ID (formerly Azure Active Directory) Conditional Access policies.
Conditional Access lets you set up location-based access rules using Named Locations, which can specify certain countries, regions, or IP address ranges. If you create a policy to allow access to Power BI or Fabric workloads only from Canada, users trying to sign in from outside Canada will be denied access.

For more details, refer to the official documentation: What is Conditional Access in Microsoft Entra ID? - Microsoft Entra ID | Microsoft Learn

Network in Conditional Access policy - Microsoft Entra ID | Microsoft Learn

Additionally, for enhanced network-level security, you can configure workspace-level private links in Microsoft Fabric. This setup ensures that access to a Fabric workspace is only possible through your organization’s private network. While private links do not enforce geographic restrictions directly, they help ensure that only users connected to your trusted network can access the workspace. This can be used in combination with Conditional Access for layered security. For setup guidance, refer to: Set up and use workspace-level private links - Microsoft Fabric | Microsoft Learn

Hope this helps. Please feel free to rech out for any further questions.

Thank you .