Share a report without handing Google BigQuery credentials

[Anonymous]

Hello everybody, I have an issue I could use some help with:

Right now im storing all my data in Google BigQuery and making my reports in Power BI, but I've noticed that when I share a report im also handing the credentials for my google account (not everybody has google accounts in my workplace) and so not only its a bit of a security issue, but anything they do is made under my name/account so I cant control / monitor what they do with the reports.

¿Does anyone knows how to solve this issue? ¿Would upgrading to service/premium would fix this?

Thanks in advance.

[v-diye-msft · Accepted solution]

Hi @Anonymous 

Sorry I'm a little confused about the whole process,  if you share the report to the end-user directly in your organizations, they can see the report from "Share with me", and once you updated the report from your own workspace, the report on the end-user's side will be synced. I do not quite understand "everytime data gets updated to the reports the query is called under my Google account to BigQuery", if the refresh was called from your side, the credential should be logged under your gateway, but if the refresh is required from other users, they need to take over your dataset and manage the credentials. actually, it's not necessary.

[Anonymous]

Update: I meant upgrading to premium, right now im using pro

[v-diye-msft]

Hi @Anonymous 

How did you share the report? and what's the permission you'd like to set for them? 

[Anonymous]

Hello Dina,

Depending on whom I'm sending the report i use either the Power Bi Pro standard share function or I straight up send the .pbix file, and sorry if I didnt formulate my question clear enough, but I have no issues with the permits I'm assigning them (read only), my problem is that encryption notwithstanding im handing them my credentials (minor issue im ok with) and that everytime data gets updated to the reports the query is called under my Google account to BigQuery, so I wanted to know if there was any way to id who is making each request.

Thanks for the help.

[v-diye-msft · Accepted solution]

Hi @Anonymous 

Sorry I'm a little confused about the whole process,  if you share the report to the end-user directly in your organizations, they can see the report from "Share with me", and once you updated the report from your own workspace, the report on the end-user's side will be synced. I do not quite understand "everytime data gets updated to the reports the query is called under my Google account to BigQuery", if the refresh was called from your side, the credential should be logged under your gateway, but if the refresh is required from other users, they need to take over your dataset and manage the credentials. actually, it's not necessary.

[Anonymous · Accepted solution]

Already solved it by using a Google service accounts for each report, thanks anyway for the help