Forum Discussion
How to secure Power BI Dataset and Report from Power BI Administrator?
- 1 year ago
Hi saliknaveed
In Power BI, even if you and your manager are the only administrators of a shared workspace, the Power BI Service Administrator (or a Microsoft 365 Global Administrator) retains the technical ability to access all content within the Power BI environment, including datasets and reports—regardless of workspace permissions or roles. This is by design to ensure compliance, auditability, and organizational governance. While Row-Level Security (RLS) can help restrict data access for report consumers, it does not prevent Power BI administrators or tenant-level admins from accessing underlying datasets. There is currently no built-in method to completely hide or encrypt report content from Power BI system administrators at the service level. If the data is highly sensitive, one workaround could involve keeping the most sensitive processing and storage off Power BI Service entirely, using local PBIX files, or integrating data masking or pseudonymization at the source level. Alternatively, you could explore Power BI Report Server (on-premises) for more control, or encrypt sensitive data at the source, so even if accessed, the data remains unintelligible without a key—though this adds complexity to your reporting pipeline.
Hi saliknaveed
Thank you ibarrau for your detailed explanation of how Power BI and Microsoft Fabric security is designed.
Just to confirm. Even if the workspace is only shared between me and my manager, a Power BI (Fabric) Administrator still has the ability to view or grant themselves access to the workspace and its contents, correct?
I understand this is by design and based on trust and NDA policies. I just want know before proceeding, since the data is quite sensitive.
Regards,
Akhil.