Tenant settings and disable Publish to power bi functionality

[Anonymous]

Since most organisations that go with report server instead of service do this based on internal security issues with cloud its a bit weird that you can, with the desktop version of PBIRS publish to power bi service. 

I have googled franatically and the best way to handle this seems to be internal firewall settings. My firtst question is, 

Is there a better way of disabling this than with firewall settings? 

My second question is,

When you can publish to Power bi service, do a holder of Power Bi report server also get a power bi service tenant and can from there handle administration in the admin portal? For example a developer can publish a report to the service and from there (if not publish to web feature disabled) publish the content to a personal blog?

I am thinking if it not possible to do anything with this at the moment a possible way (with firewall settings) would be to disable all new signups, disable workspace creation and set new protection levels. 

Any ideas?

[bradsy]

Consider using roles. Viewer role cannot publish.

https://docs.microsoft.com/en-us/power-bi/collaborate-share/service-new-workspaces

[KBO]

Hi @Anonymous ,

may be I'm wrong but you can't publish with the Power BI Report Server Desktop to the Service (if its not enabled in the configuration manager - see on the picture its not enabled)! This works only with the Report Server. May be it is possible to block the Desktop for Cloud. If you use

classic SCCM that this shouldn't work :)?

Best,

Kathrin

If this post has helped you, please give it a thumbs up!
Did I answer your question? Mark my post as a solution!

[Anonymous]

Hi! Do you have a report open in your picture? i also have published greyed out but only when no reports are open. 

With config manager i guess you mean in SSMS configuration manager?

Will check and get back if it works:)

[Greg_Deckler]

@Anonymous - I believe there is a setting in the Tenant settings for provisioning personal workspaces that you can turn off. So, if you have that turned off, nobody should have a personal workspace to publish to.

[Anonymous]

Hi @Greg_Deckler 

Thank you for the response!

I searched my adminportal for the setting that you described and on the internet. It seems that this i not possible to do. 

What you have settings for is, 

Create new workspace experience workspaces,

Use datasets across workspaces

Block classic workspace creation. 

So unfortunatly this doesnt seem to do it. It would have been a good option if it would!

Hmm... I have added this as an idea to microsoft. Its seems abit weird to me that this hasnt been discussed around.