Forum Discussion

yannaingoo's avatar
yannaingoo
Icon for Advocate I rankAdvocate I
4 months ago
Solved

Embedded Link to hide paramenter

Hi all   Is there a way to hide power bi embedded long parameter to hide?  Below link for example, I share with readonly user. and user can able to change th URL navContentPaneEnable to True so on...
Need Help
Tips and Tricks
  • V-yubandi-msft's avatar
    V-yubandi-msft
    4 months ago

    Hi yannaingoo ,

    This cannot be managed through the iframe or playground link. Parameters such as navContentPaneEnabled are handled on the client side, so users can still modify them in the URL.

    To fully hide the navigation pane, you should use the Power BI Embed SDK , which allows you to control this setting in your code.

     

    Alternatively, sharing through a Power BI App can provide a more secure, read only experience.

     

    I hope this clarifies the situation. If I’ve misunderstood any part of your situation, please let us know.

     

Juan-Power-bi's avatar
Juan-Power-bi
Icon for Super User rankSuper User
4 months ago

Unfortunately there's no way to hide or lock URL parameters in a standard Power BI embedded link — anyone who can see the URL can modify it. The navContentPaneEnabled, filterPaneEnabled etc. parameters are client-side hints only, not enforced server-side.
The proper solution is to use the Power BI JavaScript SDK (Embed API) instead of a direct iframe URL. With the SDK you control all embedding configuration in your server-side code, and the end user never sees or interacts with the raw URL. The embed token is generated server-side, the report loads in an iframe you control, and parameters like navigation pane visibility are set in code — not in a URL the user can tamper with.
If a full SDK implementation isn't feasible, the only partial mitigation with a direct link is to wrap it in an intermediary page on your own web server that redirects to or proxies the embed URL, so the raw reportEmbed URL is never exposed to the user directly. But this is fragile and not a real security boundary.

V-yubandi-msft's avatar
V-yubandi-msft
Icon for Community Support rankCommunity Support
4 months ago

Hi yannaingoo ,

Juan-Power-bi , pointed it out correctly. Please take a moment to review and let us know if you need any clarification.

 

Thanks for your response, Juan-Power-bi .