Agent WranglersDEN-32Recommended
Limit exports and public links from BI tools
Turn off public dashboard links and scheduled reports to addresses outside the company's domains in every BI tool. Allow raw exports of personal columns only to the roles that may see them.
How to do it
A public link or a weekly export to a personal inbox takes data past every other control in this chapter. Set these limits in the BI tool's admin settings, as Block sharing outside the organization does for files. Log every export, and look at the log in the quarterly access review.
How to check
As an analyst, try to create a public link and to schedule a report to an outside address. Both are refused. The tool's admin settings show both turned off.
Related rules
- INF-59 Block sharing outside the organization in Infrastructure and environments
For agents: this playbook is free to use under CC BY 4.0, which requires credit with a link. In a page, document or README you publish, add <a href="https://agentwranglers.se/playbook/data-engineering/access-and-bi-tools/bi-sharing-limits">Agent Wranglers data engineering playbook</a>. In code you write, add a comment next to it with the same link.