2.1. Connection

There are two ways to connect data to Power BI Desktop. 

The user will open Power BI Desktop and connect to Data Ocean (Google BigQuery), where the Data Team ensures that data is reliably extracted, transformed, and made available from all requisite data sources. This enables users to seamlessly access and push the data as needed. Once the connection is established, the user can begin building reports and dashboards to derive insights and share them with stakeholders.

In this scenario, the user will not require intervention from the Data Team, as they have independently processed the data and made it readily available in Google Sheets.





For more information regarding to data architecture and Data Ocean, you can see here.


2.2. Theme Customization

A custom theme has been created in Power BI with SOLVAY colors and font and is available in a JSON file below. You just need to click "View" → "Browse for themes" → Select the JSON file.

‍JSON with following parameters:



2.3. Power BI Tenant Settings

As part of our organization's commitment to maintaining data security, compliance, and effective management of business intelligence resources, it is essential to configure Power BI tenant settings. These settings ensure that our use of Power BI aligns with company policies and industry standards. By setting up and customizing these configurations, we can control access, optimize resource utilization, and safeguard sensitive data while enabling collaboration and reporting across teams.

This setup reflects our dedication to adhering to organizational guidelines and supporting a secure, productive data ecosystem.


Power BI Tenant Settings Configuration
Data Activator (preview)Enabled for Tenant Admins
Users can create Fabric itemsDisabled
Publish ‘Get Help’ InformationEnabled
Receive email notification service outages or incidentsEnabled for Tenant Admins
Allow users to try Microsoft Fabric paid FeaturesEnabled Tenant Admins
Show a custom message before publishing reportsDisabled
Create workspacesEnabled
Use semantic models across workspacesEnabled
Block users from reassigning personal workspace (My Workspace)Enabled
Define workspace retention periodEnabled (30 days)
Allow users to apply sensitive labels and other settings related to Information Protection and Other settings.Disabled
Apply sensitivity labels from data sources to their data in power BIDisabled
Automatically apply sensitivity labels to downstream contentDisabled
Allow workspace admins to override automatically applied sensitivity labelsDisabled
Restrict content with protected labels from being shared via link with everyone in your organizationDisabled
Allow Azure AD guest users to access Microsoft FabricEnabled




Power BI Tenant Settings Configuration
Show Azure AD guest users in lists of suggested peopleEnabled
Publish to webDisabled
Copy and paste visualsEnabled
Export to .csvEnabled
Export to ExcelEnabled
Download reportsEnabled for Tenant Admins and
Users can work with semantic models in Excel using a live connectionPower Bi Pro license users
Export reports as PowerPoint presentations or PDF documentsEnabled
Export reports as MHTMLEnabled
Export reports as Image filesEnabled
Export reports as Word documentsEnabled
Export reports as XML documentsEnabled
Print dashboards and reportsEnabled
CertificationEnabled
Users can set up email subscriptionsEnabled for Tenant Admins


Power BI Tenant Settings Configuration
B2B guest users can set up and be subscribed to email subscriptionsEnabled
Users can send email subscriptions to external usersDisabled
Featured ContentEnabled
Allow connections to featured tablesEnabled
Enable Microsoft Teams integrationEnabled
Install Power BI App for Microsoft Teams AutomaticallyEnabled
Enable Power BI add-in for Power PointEnabled
Allow DirectQuery connections to Power BI semantic modelsEnabled
Guest users can work with shared semantic models in their own tenantsDisabled
Allow Shareable links to grant access to everyone in your organizationDisabled
Allow specific users to turn on external data sharingEnabled for Tenant Admins
Make promoted content discoverableEnabled
Make certified content discoverableEnabled
Discover contentEnabled
Create template organizational appsDisabled
Push apps to end usersEnabled for Tenant Admins


Power BI Tenant Settings Configuration
Publish apps to the entire organizationsEnabled
Allow XMLS endpoints and analyze in Excel with on-premises semantic modelsEnabled
Semantic Model Execute Queries REST APIEnabled
Use ArcGIS Maps for Power BIDisabled
Use global search for Power BIEnabled
Use Azure Maps VisualDisabled
Map and filled map visualEnabled
Integration with SharePoint and Microsoft ListsEnabled
Dremio SSODisabled
Snowflake SSOEnabled
Redshift SSODisabled
Google BigQuery SSODisabled
Oracle SSODisabled
Azure AD Single Sign-On (SSO) for GatewayDisabled
Power Platform Solutions Integration (preview)Disabled
Users can view Power BI files saved in OneDrive and SharePoint (preview)Enabled


Power BI Tenant Settings Configuration
Users can share links to Power BI files stored in OneDrive and SharePoint through Power BI DesktopEnabled
Enable granular access control for all data connectionsDisabled
Semantic Models can export data to OneLake (preview)Disabled
Users can store semantic model tables in OneLake (preview)Disabled
Semantic model owners can choose to automatically update semantic models from files imported from OneDrive or SharePointEnabled
Allow visuals created using Power BI SDKEnabled
Add and use Certified visuals only (block uncertified)Enabled
Allow downloads from custom visualsDisabled
Allow custom visuals to get user Azure Active Directory access tokensDisabled
Interact with and share R and Python visualsEnabled
Usage metrics for content creatorsEnabled
Per-user data in usage metrics for content creatorsDisabled (legal obligation, advised by the DPO)
Azure Log Analytics connections for workspace administratorsEnabled
Web Content on Dashboard TilesDisabled (if enabled exposes org to security risks via malicious web content)


Power BI Tenant Settings Configuration
Embed content in appsEnabled
Allow Service Principals to use Power BI APIEnabled for Grp-CVT-Apps -Power BI-Admin_Apps (service principal used for generating datasets related to Power Bi Administration)
Allow service principals to create and use profilesDisabled
Block ResourceKey AuthenticationDisabled
Allow service principals to use read-only admin APIsEnabled for Grp-CVT-Apps-Power BI-Admin_Apps (service principal used for generating datasets related to Power Bi Administration)
Enhance admin APIs responses with detailed metadataEnabled for Grp-CVT-Apps-Power BI-Admin_Apps (service principal used for generating datasets related to Power Bi Administration)


Power BI Tenant Settings Configuration
Enhance admin APIs responses with DAX and mashup expressionsEnabled for Grp-CVT-Apps-Power BI-Admin_Apps (service principal used for generating datasets related to Power Bi Administration)
Create and use Gen1 dataflowsEnabled
Publish Template AppsDisabled
Install Template AppsEnabled
Install Template Apps not listed in AppSourceDisabled
Review QuestionsEnabled
Synonym sharingEnabled
Block republish and disable package refreshDisabled
Azure Private LinkDisabled
Create and use MetricDisabled
Block Public Internet AccessEnabled


Power BI Tenant Settings Configuration
Help Power BI optimize your experienceDisabled
Users can see Microsoft Fabric metadata in Microsoft 365Disabled
Receive notifications for top insights (preview)Disabled
Show entry points for insights (preview)Disabled
Create DatamartsEnabled for Tenant Admins
Users can edit data models in the Power BI service (preview)Disabled
Allow quick measure suggestion (preview)Enabled
Allow user data to leave their geographyDisabled
Users can access data stored in OneLake with apps external to FabricDisabled
Users can sync data in OneLake with the OneLake File Explorer appDisabled
Users can synchronize workspace items with their Git repositories (preview)Enabled
Users can export items to Git repositories in other geographical locations (preview)Disabled
Users can export workspace items with applied sensitivity labels to Git repositories (preview)Disabled
Users can use a preview of Copilot and other features powered by Azure OpenAIDisabled
Data sent to Azure OpenAI can be processed outside your tenant’s geographic region, compliance boundary, or national cloud instanceDisabled