Forum Discussion
contain security or privacy
How safe is custom visuals? When I try to upload new custom visuals, some of them really great - there is such prompt: Custom Visuals are not provided by Microsoft and could contain security or ...
Hello,
I work for an agency and we are considering using Power BI and the custom visuals **ONLY from the Power BI Custom Visuals Gallery** for our reporting needs. That said, we need an official Microsoft response to be able to move forward. We are mainly concerned with our data being able to be leaked by using/importing a custom visual from the gallery.
Thank you for your time and consideration of this question.
If you are worried about leaks in the Custom Visuals, you will first need to figure out what sort of leak you are concerned with.
Are you worred about:
- Backdoors and leaks within the Custom Visual Code
- Reports storing identifable data that a user could export and use.
- Unauthorized users running reports or dashboards they aren't supposed to.
- Some other leak i've not listed.
I would suggest for each:
- You can inspect the code yourself for each visual you download. PBIVIZ files can be opened by 7-Zip and the code is all held in essentially Text Files. You may need someone with Typescript or Javascript experience to aid you.
- Depending on how you write your reports, this may or may not be an issue
- If you use Row Level Security, you can lock out data from certain users and prevent non-authorized users from seeing anything.
- Post the scenario you are concerned with.