PowerBI Service DataSource Credentials Storage

[dbaabhi]

Is there a document or article that explains how PowerBI Service stores the credentials for Data Sources.

This was the question asked by our security team while reviewing our PowerBI reports.

[v-robertq-msft · Accepted solution]

Hi, @dbaabhi 

According to my research, the credentials entered for the data source in Power BI are encrypted then stored in the cloud. only the gateway can decrypt the credentials. The credentials are encrypted securely. They use symmetric encryption so that they can't be decrypted in the cloud before they're stored in the cloud. The credentials are sent to the machine that runs the gateway, on-premises, where they're decrypted when the data sources are accessed.

Here are the related documents, you can take a look at:

https://docs.microsoft.com/en-us/power-bi/connect-data/service-gateway-data-sources#store-encrypted-...

https://docs.microsoft.com/en-us/data-integration/gateway/service-gateway-onprem-indepth#how-the-gat...

https://radacad.com/the-power-bi-gateway-all-you-need-to-know

Thank you very much!

Best Regards,

Community Support Team _Robert Qin

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.