SharePoint Publish to Web Security

[Anonymous]

Dear community,

I have read many posts but my question remains unanswered. When I were to embed sensitive data onto a secure SharePoint environment through the publish to web feature, would it be possible to get access to my report when the embed code is not shared by anyone? 

I understand that a scenario would be possible where somebody with acces to editing rights of the SharePoint site, can take the embed code and share it to give others access. But as I have seen in multiple posts, the embed code (not the SharePoint link) is not findable or searchable in any public Microsoft website or directory. So this would mean that the only sharing option people could try, is sharing the SharePoint link. But then somebody without access to that SharePoint site will not be able to view the report anyway? 

Kind regards,

M. Wittig

[Seth_C_Bauer · Accepted solution]

@Anonymous Publish to web is not secure. The Report link is discoverable. You take that link and use it in your SharePoint web part which may be secured behind your login process, but the report link itself is not secure. If you have any doubts, just look at the documentation by MSFT on the subject - https://docs.microsoft.com/en-us/power-bi/service-publish-to-web