PowerBI Salesforce - Is there a way to have the credentials stored centrally?

[mickyc1]

We have started using the PowerBI to Salesforce connector and was wondering is there a way we can store SFDC credentials centrally in something like Azure KeyVault? Currently, our developers have their own named accounts on SFDC that they use when building the reports in PBI desktop. We want to move away from this and use an Integration account that has been setup on SFDC but we do not want this password to shared around the team.

From my reading the only KeyVault functionality that PBI supports is for BYOK, not credential unwrapping.

Can anyone provide some insight on how to best achieve this?

[mickyc1]

Hi, we have Power BI premium and I am aware of the Key Vault integration for BYOK. What I am asking is there any where to centrally store credentials for a salesforce dataset without BI Developers having to share credentials?

[v-xiaoyan-msft]

Hi @mickyc1 ,

I am afraid that you can only use azure key vault with power BI premium. Power BI encrypts data at-rest and in process. 

All data persisted by Power BI is encrypted by default using Microsoft-managed keys. Customer data stored in Azure SQL Databases is fully encrypted using Azure SQL's Transparent Data Encryption (TDE) technology. Customer data stored in Azure Blob storage is encrypted using Azure Storage Encryption.

Optionally, organizations can utilize Power BI Premium to use their own keys to encrypt data at rest that is imported into a dataset. This approach is often described as bring your own key (BYOK). Utilizing BYOK helps ensure that even in case of a service operator error, customer data will not be exposed – something that cannot easily be achieved using transparent service-side encryption.

Please see Bring your own encryption keys for Power BI 

For more information，you can refer to：Power BI security white paper 

Hope it helps,

Community Support Team _ Caitlyn

If this post helps then please consider Accept it as the solution to help the other members find it more quickly.