Restricting access to Service like you would Outlook?

[BSLATTER]

Hi all,

We're looking at using Power BI Service but have a couple issues around securing the data.

We use Intune management to manage the Power BI Mobile App and that is working well.

However we find that we can still have users download .pbix files off network on their local machines.

I know conditional access exists and we are looking at setting that up - but my fear is that would disable use of the Power BI Mobile app.

Is there a way to block downloading .pbix/data to excel off-network without completing blocking the tool?

Thank you

[v-lid-msft]

Hi @BSLATTER ,

If you want to disable the feature "Export to pbix file" or "Export data", we can disable it for entire organization or only enable it for special user/group in Admin Portal.

Based on this document,  There are a few important considerations and limitations associated with downloading a .pbix file from the Power BI service.

• To download the file, you must have edit access to the report.
• If your administrator has turned off the ability to download data, this feature won't be visible in the Power BI service.

And based on this document, These limitations and considerations apply to Power BI Desktop and the Power BI service, including Power BI Pro and Premium.

• To export the data from a visual, you need to have Build permission for the underlying dataset.
• Power BI admins can disable the export of data.

We can also disable these features by removing the edit premission from user( For examlpe set them as Contributor in New App Workspace).

Best regards,

[GilbertQ]

hi there

WHat I would suggest doing, is to share the reports with users via an App. This would mean that the users can access the data online and via the mobile app.

The difference is when sharing via an App it is read only and they do not have an option to download the file. Make sure when you share via the app that you do not allow the build permissions to the users.