Question

Your organization has a compliance requirement that only members of a specific security group named 'Finance-Reporting' are allowed to export data from Power BI reports to Excel or CSV. All other users must be blocked from exporting. As a Power BI administrator, what is the best way to enforce this requirement across the tenant?

Accepted Answer

In the Power BI Admin portal, configure the 'Export to Excel' and related export tenant settings to be Enabled for the specific security group 'Finance-Reporting' and disabled for the rest of the organization.

Answer

Apply a sensitivity label with encryption to every semantic model and grant only 'Finance-Reporting' the Export usage right.

Answer

Add the 'Finance-Reporting' group as Members of every workspace and set all other users to the Viewer role.

Answer

Configure row-level security roles so that only 'Finance-Reporting' users can see exportable data.