Sensitivity Labels Security by-passed in one click export to .csv

Hello,

I have a sensitive Power BI Dataset (hosted on Power BI Service) and I need to provide different users access to so they could connect to it from their own reports.

Issue I face is that once they connect to it from their own managed reports, they can export all the sensitive data as I can't manage the rights within their reports to allow or not data extraction from report. Although you could prevent data export at the tenant level, we need to keep it enabled for the cases where this is required.

Sensitivy labels came into play with PowerBI and was really promising as this was allowing to control the data access even when the data was exported. So I have created a label using data encryption that I assigned to my sensitve dataset.

The big issue I faced is that if users decide to extract data to csv file instead of xlsx, my sensitive data is not protected anymore, all gone in one click.

It seems like I can't configure explicitly to avoid extraction to csv and only use xlsx export ...

I was wondering thus how do you do to let people manage their own reports while securing the data they access?

Thanks for any guidance.

Regards,

Marc.