Light mode
Microsoft Power BI Baseline Report
| Tenant Display Name | Tenant Domain Name | Report Date | Baseline Version | Module Version |
|---|---|---|---|---|
| tqhjy | tqhjy.onmicrosoft.com | 10/15/2026 21:46:53 Coordinated Universal Time | 1 | 2.0.0 |
Policy Indicators:
Automated Check
Automatically verified by ScubaGear
POWERBI-1 Publish to Web
| Control ID | Requirement | Result | Criticality | Details |
|---|---|---|---|---|
| MS.POWERBI.1.1v1 | The "Publish to Web" feature SHOULD be disabled unless the agency mission requires the capability. | Pass | Should | Requirement met |
POWERBI-2 Power BI Guest Access
| Control ID | Requirement | Result | Criticality | Details |
|---|---|---|---|---|
| MS.POWERBI.2.1v1 | Guest user access to the Power BI tenant SHOULD be disabled unless the agency mission requires the capability. | Pass | Should | Requirement met |
POWERBI-3 Power BI External Invitations
| Control ID | Requirement | Result | Criticality | Details |
|---|---|---|---|---|
| MS.POWERBI.3.1v1 | The "Invite external users to your organization" feature SHOULD be disabled unless agency mission requires the capability. | Warning | Should | Requirement not met |
POWERBI-4 Power BI Service Principals
| Control ID | Requirement | Result | Criticality | Details |
|---|---|---|---|---|
| MS.POWERBI.4.1v1 | Service principals with access to APIs SHOULD be restricted to specific security groups. | Pass | Should | Requirement met |
| MS.POWERBI.4.2v1 | Service principals' ability to create and use profiles SHOULD be restricted to specific security groups. | Pass | Should | Requirement met |
POWERBI-5 Power BI Resource Key Authentication
| Control ID | Requirement | Result | Criticality | Details |
|---|---|---|---|---|
| MS.POWERBI.5.1v1 | ResourceKey-based authentication SHOULD be blocked unless a specific use case (e.g., streaming and/or "push" datasets) merits its use. | Warning | Should | Requirement not met |
POWERBI-6 Python and R Visual Sharing
| Control ID | Requirement | Result | Criticality | Details |
|---|---|---|---|---|
| MS.POWERBI.6.1v1 | Python and R interactions SHOULD be disabled. | Warning | Should | Requirement not met |
POWERBI-7 Power BI Sensitive Data
| Control ID | Requirement | Result | Criticality | Details |
|---|---|---|---|---|
| MS.POWERBI.7.1v1 | Sensitivity labels SHOULD be enabled for Power BI and employed for sensitive data per enterprise data protection policies. | Pass | Should | Requirement met |