Publish to Web - Security Questions

[Anonymous]

Hi, 

I have a situation where the dashboard will be public has a map visualisation that uses longitude and latitude data - Is it possible to show this visualisation without revealing the longitude/latitude data at all?

For a report that was published to web, I have added the following restrictions in Power BI:

• The visualisation (map) in mind has its Visual Headers disabled.
• Can't right-click the visualisation to "Show as a table", due to the map's right-click interaction.
• The tooltip has been replaced with a customised tooltip (that doesn't include longitude/latitude).
• The longitude/latitude data isn't used anywhere else in the dashboard.

1. If it is published to web, is it still possible for users to access the longitude/latitude data?

2. When it is published to the web (i.e. https://app.powerbi.com/view?r=..... ), are there any data security vulnerabilities? Is it still possible for users to access this data at all?
e.g. Pulling data using API/GET/POST/etc.

Would really appreciate the help

Thank you,

Adrian

[GilbertQ · Accepted solution]

Hi @Anonymous 

The limitations of publish to web is that viewers cannot download or extract the data.

As long as your columns are hidden the viewers should not be able to see the lat or long.

With that being said it is plotted on a map where the viewers will be able to zoom in and find the location on the map!

[GilbertQ]

Thanks for letting us know!

[Anonymous]

Hi @GilbertQ and @v-janeyg-msft ,

Thank you both for your replies.

I'm glad that this will restrict users from viewing the longitude and latitude data.

Unfortunately the map zoom issues that @GilbertQ mentioned will be a concern, but I'll post this as another question.

Thanks again for both of your help, really appreciate it,

Adrian

[v-janeyg-msft · Accepted solution]

Hi, @Anonymous 

It’s my pleasure to answer for you.

According to your description,You have done some restrictions to manually control the appearance of latitude and longitude in the report. In fact, there are not as many interactions on the publish to web report as on the PBI, such as ‘show as a table’ you set.

You can try not to share the link first, and then check whether the content of publish to web meets your requirements, and make changes.Generally speaking, the content that cannot be seen in the reading view mode on the PBI service is also invisible on 'publish to web'. After the requirements are met, the link can be shared. At this time, everyone who knows the link can see the content without permission. Also, Users can't use other methods to extract unseen data.

Reference link:Publish to web from Power BI - Power BI | Microsoft Docs

If it doesn’t solve your problem, please feel free to ask me.

Best Regards

Janey Guo

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[GilbertQ · Accepted solution]

Hi @Anonymous 

The limitations of publish to web is that viewers cannot download or extract the data.

As long as your columns are hidden the viewers should not be able to see the lat or long.

With that being said it is plotted on a map where the viewers will be able to zoom in and find the location on the map!