Microsoft Certified: Power BI Data Analyst AssociateDeploy and maintain assetsMedium
A Power BI administrator needs to restrict certain users from exporting data from reports in a specific workspace. This is part of a data loss prevention strategy. Which setting in the Power BI service should the administrator configure to achieve this?
- ARow-Level Security (RLS) roles
- BIndividual report sharing permissions
- CPower BI App audience permissions
- DPower BI tenant settings for export and sharing
Show answer & explanationAnswer & explanation
Correct answer: D. Power BI tenant settings for export and sharing
Power BI tenant settings provide granular control over various features for the entire organization or specific security groups. The 'Export data' setting within the tenant settings can be used to disable data export from reports for specific users or security groups, which is a key part of data loss prevention.
Why the other options are wrong
- A. Row-Level Security (RLS) filters data *rows* that users can see, it does not prevent the export of visible data.
- B. Individual report sharing permissions control who can *view* the report, not specific actions like exporting data.
- C. Power BI App audience permissions control who can *access* the app's content, not granular actions like data export within reports.
Power BI Tenant Settings (Export Data)
Power BI Tenant Settings allow administrators to control organizational-wide features, including the ability to export data from reports, for all users or specific security groups, supporting data loss prevention.
- Organizational-wide control
- Managed by Power BI administrators
- Can restrict data export
- Supports data loss prevention
Memory trick: Tenant settings are the gatekeeper for data export across the organization.