Publish to Web Security

[Kat7]

We have a report we want people within our compnay to be able to access, but also some customers who are not part of our domain.

We were thinking we'd embed the publish code to a website we'd host externally, but then lock down access to that site with certificates, so only people with a certificate could access the report.  However, if we use the internal publish embed code, the users have to log in with O365 account within our domain, which won't work for our customers. If we use the publish to external web embed code, then the report is accessible for everyone on the internet.

How can we lock this down to only the people we want to view this report?

Thank yo!

[Anonymous · Accepted solution]

Hi @Kat7 ,

As @R1k91 ‘s said, publishing to web is not safe, you can learn more about publishing to web here.Publish to web from Power BI - Power BI | Microsoft Learn

A more secure approach to share reports with specific users, including those outside your organization, would be through Power BI Apps or Secure Embedding for your applications.

• You can package your reports and dashboards into a Power BI App and share it with your internal users and external customers. External users can be invited as guest users in your Azure Active Directory (AAD), allowing them to access the app with their own credentials. This method maintains security while providing access to the necessary reports. For more details on sharing with external users.
• If you have a web application that both your employees and customers use, you can securely embed Power BI reports within the application. This method uses Power BI Embedded in Azure, allowing you to control access through your application's authentication mechanism.

Apps in Power BI - Power BI | Microsoft Learn

Power BI embedded analytics overview - Power BI | Microsoft Learn

Distribute content to external guest users with Microsoft Entra B2B - Power BI | Microsoft Learn

How to Get Your Question Answered Quickly - Microsoft Fabric Community

If it does not help, please provide more details.

Best Regards
Community Support Team _ Rongtie

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[R1k91]

publish to web is not securable. simply don't use it if you don't want unauthorized people to access those data.