Power Pages: Design studio - Support Power BI embed token v2 for Power Pages
🚨 The Signal: Power Pages now supports Power BI Embed Token v2, enabling richer analytics with paginated reports and data lake models. This expands data embedding capabilities, potentially increasing data exposure risks if not configured securely.
The Impact
Power Pages administrators and developers are affected, with a risk of increased data exposure if Power BI embedding is not securely configured.
- Power Pages Admins: Must review and update security configurations for Power BI embedding.
- Power Pages Developers: Need to understand secure implementation of Embed Token v2.
- Data Owners: Risk of unauthorised data access if embedding permissions are misconfigured.
- Security Teams: Requires updated guidance and monitoring for Power Pages data exposure.
The Action
- Review existing Power Pages Power BI embedding configurations for use of Embed Token v2.
- Implement least privilege access for Power BI datasets and reports embedded via Embed Token v2.
- Ensure Power BI workspace and dataset permissions align with Power Pages audience access requirements.
- Update security documentation and training for Power Pages developers on secure Power BI embedding practices.
- Monitor Power Pages audit logs for unusual Power BI data access patterns.
Domain: Other · Impact: medium · Workload: Other