How pure embedding passes identity and enforces RLS

Mike & Tommy tackle the critical security distinctions between Publish to Web and Power BI Embedded when exposing reports publicly, questioning whether Embedded actually provides meaningful protection over Publish to Web when authentication isn't required. They explore how Row-Level Security behaves differently in each approach, whether URL filters can be locked down, and what organizations should actually do when building public-facing dashboards—including when to aggregate data upstream, disable granular access entirely, or reconsider whether the data should be public at all.Get in touch:

Send in your questions or topics you want us to discuss by tweeting to @PowerBITips with the hashtag #empMailbag or submit on the PowerBI.tips Podcast Page.

Visit PowerBI.tips: https://powerbi.tips/

Watch the episodes live every Tuesday and Thursday morning at 730am CST on YouTube: https://www.youtube.com/powerbitips

Subscribe on Spotify: https://open.spotify.com/show/230fp78XmHHRXTiYICRLVv

Subscribe on Apple: https://podcasts.apple.com/us/podcast/explicit-measures-podcast/id1568944083‎

Check Out Community Jam: https://jam.powerbi.tips

Follow Mike: https://www.linkedin.com/in/michaelcarlo/

Follow Tommy: https://www.linkedin.com/in/tommypuglia/