Hi,
HELP! I'm currently facing a cyber security challenge.
Our cyber security team do not believe publishing from Power BI Desktop to Power BI Service is secure and have since prevented this function within our business. Needless to say, this completely undermines the ability to share and collaborate on power bi reports and significantly undermines the value of power bi.
Their premise for limiting this ability is that content (reports) published from power bi desktop traverses the internet on route to power bi service and therefore are exposed?
In the simplest terms is this cyber security statement accurate? and if so, is it done in a secure fashion? I understand the connection to power bi service is established using tls and https and that transmitted data is encrypted, is this accurate?
I appreciate I'm likely not explaining this clearly, cyber security is not my specialism, but I am struggling to convince our security team that the SaSs power bi service is secure. Our access into power bi service is controlled by Azure AAD and requires a pro licence. Access to workspaces is controlled by AAD group membership, access to data sources is also controlled by separate AAD groups. I appreciate further granular security can be achieved with RLS.
Any pointer to other threads, documents or help would be really appreciated.
