Forum Discussion

Dimitris_Kats's avatar
1 year ago
Solved

Personal gateways, security concerns

Hello dear members.

 

I was wondering if there are any security concerns when users are installing and using on prem gateway ( personal mode) to refresh there datasets.

I couldn't find related documentation in Microsoft. 

 

I would greatly appreciate your advice 

 

Thank you 

  • blopez11's avatar
    blopez11
    1 year ago

    Unfortunately you cannot prohibit personal gateway installs from the UI in the Power BI service.  You have to use the Power BI powershell cmdlets.  Luckily the guy in a cube folks created a video covering this, link below.  We did have concerns with users using personal gateways as they could use whatever they had access to and we wouldn't know.  So I guess the answer to the data leakage conerns is yes.

     

    https://youtu.be/VC9XoDaAE-Y?si=tzXpbrFBhORY9hWE

4 Replies

  • We prohibit the installation of personal gateways as we have no way to govern the sources from those gateways.  We want reports to be sourced from governed and known sources off of our managed gateways.  This is more so for key data sources (hr, finance, etc.).  Personal gateways are also tied to the creator's machine, so if they move on to another opportunity, that source likely disappears and downstream reports start to fail their refreshes.

     

    Hope this helps a bit.

  • blopez11 thank you so much. This is very helpful. 

    How have you prohibited the installation of the personal gateways? 

    Are there any data leakages concerns linked to personal gateways?

    • blopez11's avatar
      blopez11
      Super User

      Unfortunately you cannot prohibit personal gateway installs from the UI in the Power BI service.  You have to use the Power BI powershell cmdlets.  Luckily the guy in a cube folks created a video covering this, link below.  We did have concerns with users using personal gateways as they could use whatever they had access to and we wouldn't know.  So I guess the answer to the data leakage conerns is yes.

       

      https://youtu.be/VC9XoDaAE-Y?si=tzXpbrFBhORY9hWE