Forum Discussion
How to secure Power BI Dataset and Report from Power BI Administrator?
- 1 year ago
Hi saliknaveed
In Power BI, even if you and your manager are the only administrators of a shared workspace, the Power BI Service Administrator (or a Microsoft 365 Global Administrator) retains the technical ability to access all content within the Power BI environment, including datasets and reports—regardless of workspace permissions or roles. This is by design to ensure compliance, auditability, and organizational governance. While Row-Level Security (RLS) can help restrict data access for report consumers, it does not prevent Power BI administrators or tenant-level admins from accessing underlying datasets. There is currently no built-in method to completely hide or encrypt report content from Power BI system administrators at the service level. If the data is highly sensitive, one workaround could involve keeping the most sensitive processing and storage off Power BI Service entirely, using local PBIX files, or integrating data masking or pseudonymization at the source level. Alternatively, you could explore Power BI Report Server (on-premises) for more control, or encrypt sensitive data at the source, so even if accessed, the data remains unintelligible without a key—though this adds complexity to your reporting pipeline.
Hi saliknaveed No, it is not possible to completely hide Power BI datasets or reports from a Power BI system administrator. However, you can encrypt sensitive data before uploading or use DirectQuery with a secure external data source. Limit data exposure by including only aggregated information and restrict workspace access strictly.