Chris Williams on 19 Jun 2020 22:46:23
Current rules for certified visuals prevent visuals from making requests outside of PowerBI.
The specific rule states:
1200.1.3 Code security
Your source code should comply with all security and privacy policies. Source code must be safe and not pass or transmit customer data externally.
This seems like a good rule, but Microsoft is now interpreting this to prevent certified visuals from making requests to any external location, even to display images. Certified visuals like the popular Image control by my company are now no longer approved.
This rule prevents visuals from displaying images from the Internet or even from a company's Azure Blob Storage account, severely limiting their functionality.
The alternative is to use a non-certified visual, which many organizations may not allow. Non-certified visuals can also not be exported in PDF or PPT.
Report authors should be free to use a certified visual to display images from whatever source they choose.
- Comments (15)
RE: Certified visuals should be able to display external images
Good information, thankssehackear.top
RE: Certified visuals should be able to display external images
#brandbankCan we not get a caht going with the team @ brandbank around a custom visual, even if only for the extensive library avaiable there ?This would be game changing !
RE: Certified visuals should be able to display external images
Good idea, it will save a lot a time
RE: Certified visuals should be able to display external images
Hello Chris, please, how can we use the non-certified visual to use images from whatever source due to the issues reported with certified version, as workaround at this moment?
RE: Certified visuals should be able to display external images
It is very unfortunate that microsoft blocking image display from intranet.
We cannot keep all images in public web site for display in Power BI (lost privacy).
Microsoft should ensure the intranet image display functionality.
RE: Certified visuals should be able to display external images
I have a number of clients who rely on being able to print out co-branded Power BI dashboards to market their services. There isn't another image viewer that supports printing to PDF or PowerPoint. My clients are going to be very, very unhappy with this turn of events. This is really upsetting and seems incredibly short-sighted on the part of Microsoft.
RE: Certified visuals should be able to display external images
Thats a very silly interpretation and they should be very careful before changing the rules.
Power BI users are now 2..5m+ and Publish to Web is used by many crucial public dashboards including conveying information on Coronavirus COVID-19.
RE: Certified visuals should be able to display external images
Please. The latest decision makes it impossible for us to show a report showing the logo of the related customer dynamically.
RE: Certified visuals should be able to display external images
I don't understand this either. We use several of these types of visuals to make reports look amazing.
so does MSFT...
The report used for marketing on the desktop main info page (https://powerbi.microsoft.com/en-us/desktop/) is one made by Microsoft and it uses a custom visual by Microsoft that grabs online images. It also uses one form Cloudscope, too.
Will the MSFT one stay certified?
(https://appsource.microsoft.com/en-us/product/power-bi-visuals/WA104380806?tab=Overview)
Generally if MSFT wants to help us keep our data safe then they should work on simple features for data protection and governance. One idea would be a section in the 'Get more visuals' dialog for visuals that do not send data. Otherwise they are keeping us from using even their own cloud products like Azure blobs for images.
This also kills the idea of having any image processing visuals - think 'Key influencers' for images. I don't have a full use case in my head but it seems really silly to cut that off.
FYI. You can download that report here:
https://powerbi.tips/2020/02/mind-blown
RE: Certified visuals should be able to display external images
Of course this should be possible. This is not a kindergarden, as every company can should take care of their own image policies and security issues.