Hi All,
We are looking to publish Power BI reports to personal Windows 10 devices of users and we are looking at restricting access.
Similar to conditional access we wish to enforce restrictions:
- Data can be accessed via a browser-only with no ability to download, print, or synch files.
- Users will also be prevented from accessing content through desktop apps
- Have the ability to control whether we allow or block editing of files in the browser
- Users will always be prompted for MFA
So, prompting for MFA is available.
However, for example, can I put in restrictions if a user exports data or wants to modify data, that this can only be done using the online version of Excel? In essence creating a sandbox area away from the local machine. But when using a corporate device no restrictions will apply?
Microsoft have advised that we can create tenant level restrictions:
https://docs.microsoft.com/en-us/power-bi/service-admin-portal#tenant-settings
but I was hoping to have something a little bit more granular.
One solution that might be viable is using Microsoft Cloud App Security to publish the Power BI site. However, I am not too sure how this would be done.
I am new to Power BI so I apologise for any ignorance of how the environment works, but has anyone dealt with a similar issue or can provide any guidance?
Many thanks in advance!
