Power BI: Block Resource Key Authentication

<# .SYNOPSIS PowerBI Resource Key Blocked .DESCRIPTION Blocks PowerBI resource keys to prevent unauthorized embedding .NOTES NL Baseline v2.0 Security concern: Resource keys allow embedding without user authentication #> #Requires -Version 5.1 #Requires -Modules MicrosoftPowerBIMgmt [CmdletBinding()] param([switch]$Monitoring) $ErrorActionPreference = 'Stop' Write-Host "`n========================================" -ForegroundColor Cyan Write-Host "PowerBI Resource Key Blocked" -ForegroundColor Cyan Write-Host "========================================`n" -ForegroundColor Cyan function Invoke-Monitoring { try { Write-Host " ⚠️ Manual verification required" -ForegroundColor Yellow Write-Host "`n Configuration in PowerBI Admin Portal:" -ForegroundColor Cyan Write-Host " Tenant settings > Developer settings" -ForegroundColor Gray Write-Host "`n Required Settings:" -ForegroundColor Cyan Write-Host " ✓ Embed content in apps: Disabled" -ForegroundColor Gray Write-Host " ✓ Apply to: Entire organization" -ForegroundColor Gray Write-Host "`n Security Concerns:" -ForegroundColor Red Write-Host " • Resource keys allow embedding without authentication" -ForegroundColor Red Write-Host " • Bypasses user consent and permissions" -ForegroundColor Red Write-Host " • Potential for unauthorized access" -ForegroundColor Red Write-Host " • Data exposure risk" -ForegroundColor Red Write-Host "`n Security Benefits of Blocking:" -ForegroundColor Cyan Write-Host " • Prevents unauthorized embedding" -ForegroundColor Gray Write-Host " • Enforces authentication requirements" -ForegroundColor Gray Write-Host " • Maintains access controls" -ForegroundColor Gray Write-Host "`n ⚠️ Security Risk: Resource keys bypass authentication!" -ForegroundColor Red exit 0 } catch { Write-Host "ERROR: $_" -ForegroundColor Red exit 2 } } try { if ($Monitoring) { Invoke-Monitoring } else { Write-Host "Use: -Monitoring" -ForegroundColor Yellow } } catch { throw } finally { Write-Host "`n========================================`n" -ForegroundColor Cyan } function Invoke-Remediation { <# .SYNOPSIS Herstelt de configuratie naar de gewenste staat .DESCRIPTION Dit is een monitoring-only control, remediation delegeert naar monitoring #> [CmdletBinding()] param() Write-Host "[INFO] Dit is een monitoring-only control" -ForegroundColor Yellow Write-Host "[INFO] Running monitoring check..." -ForegroundColor Cyan Invoke-Monitoring }