How safe is to send credentials as parameters for a script?

[arlugones]

Hi there,

Is it safe to send credentials as parameters for a script as my PowerBI reports get shared thru a public link (embedded report)? I mean, could parameters be retrieved using the navigator dev tools?

Thanks in advance, A

[TomMartens · Accepted solution]

Hey @arlugones,

from a technical point of view, I would consider storing credentials in a query "safe" in regards to using the publish to web (public link) function to democratize your report.

Publish to web creates a copy of the original report containing the "imported" data, this copy will reside outside of the workspace, meaning the copy is not protected. As the credentials are stored inside the query, and will not be copied, at least this is my current understanding.

Nevertheless, I totally agree with @Greg_Deckler not to use publish to the web when the data contains confidential data, as anyone who has the link will be able to access the copy of the report.

Regards,

Tom

[Greg_Deckler]

@arlugones I wouldn't do it.

[arlugones]

Why? I'm new to this dashboard publishing thing so excuse my ignorance. Is it best to hard-code credentials on the script?