on 07 Mar 2017 19:23:09
We dont want our users to push all kind of data in to Power BI. With "my workspaces" this leads to this kind of situvation as we cannot control, where as when we steer this via "Group workspace" we could build an central solution where users can request creation of "Group Workspace" with clear data classification before we provision them in the cloud.
for Governance reasons we would Need the possibility to disable the "personal Workspace" Feature (disabling creation of Groups by all users is another Topic). Otherwise users can publish data to the Cloud Service without Knowledge of the Service Manager (Power BI Admin).
- Comments (12)
RE: Power BI Admin: policy to disable Personal Workspace's
This is a data and security risk that needs to be disabled
RE: Power BI Admin: policy to disable Personal Workspace's
Since "My Workspace" cannot be moved to the Premium capacity by PBI Admin, this would leave a security gap when a user publishes data into his/her own workspace where no VNet or other security components are applied. Therefore, it is important for the Admin to be able to control, disable publish to, or remove all the My Workspaces" or Personal Groups altogether from the Service.
RE: Power BI Admin: policy to disable Personal Workspace's
I like the idea around My Workspace but Microsoft needs to put in controls. Allow the disabling amongst Pro users. Companies need the ability to control how we want the product to behave from a security perspective.
RE: Power BI Admin: policy to disable Personal Workspace's
There should be an option to disable Personal Workspace for specific user types in the tenant, for example guest users of a tenant by virtue of Premium capacity in a tenant get Power BI free and gain the ability to upload data & content in Personal Workspace. This poses a risk to data protection and becomes a security issue.
RE: Power BI Admin: policy to disable Personal Workspace's
In my point of view an O365 or Power BI Admin should be able to decide security granularity for all features by setting policies per company rules in any tenant of Azure Cloud.
RE: Power BI Admin: policy to disable Personal Workspace's
It might be enough to say Power BI Pro users are "read-only" users.
RE: Power BI Admin: policy to disable Personal Workspace's
Since a free user soon can't share at all is this still relevant?
Doesn't it matter if someone has gone to the trouble of publishing a pbix or xlsx file to a sandbox where no one else can see?
If admin users could delete or transfer files from an individual's my workspace to somewhere else it could a useful way to draw ideas from edge users into the tenant's systems. Discoverabilty of business logic.
RE: Power BI Admin: policy to disable Personal Workspace's
Another potential solution would be to prevent sharing from My Workplace... basically enabling it as a personal web option, but requiring "official" deployment to a group workspace.
RE: Power BI Admin: policy to disable Personal Workspace's
Please provide ways to disable my workspaces for admins. For larger organizations, data governance is a key question asked by management executives to decide on an cloud based financial investments.
RE: Power BI Admin: policy to disable Personal Workspace's
we would like to have a way for users to define the workspace they see when they log in. currently, they see the personal workspace first and if they haven't created any reports and are just report consumers, they get lost or think that there's nothing to see. It should be also possible to link Active Directory groups and roles to the workspace option in power bi.