Why a 2-step process?
This is the recommended approach when providing secure access to Power BI content (e.g., data dashboard) to external B2B users (e.g., association members). This approach is outlined in Microsoft support documentation here: Distribute Power BI content to external guest users using Microsoft Entra B2B.
Addressing Privacy Concerns Regarding Entra ID Invitations
We understand the importance of privacy and the need for secure communications. In this article, we aim to address any concerns you may have regarding the authenticity of the Entra ID invitation you recently received and the requested permissions.
Here are potential warnings that you may see during the Entra ID onboarding process:
1. Be Careful With This Message warning:
Be Careful With This Message
The sender's email domain has been active for a short period of time and could be unsafe.
> Some email security vendors such as Proofpoint generate warnings like this for ‘Newly Registered Domains.’ The embacresearchdashboard.org domain was established for the express purpose of delivering the benchmarking dashboard to the membership in 2023. This warning should not appear next year.
2. Please only act on this email if you trust the individual and organization warning:
Please only act on this email if you trust the individual and organization represented below. In rare cases, individuals may receive fraudulent invitations from bad actors posing as legitimate companies. If you were not expecting this invitation, proceed with caution.
> This is a standard warning message issued by Microsoft by default to Entra ID invitations. EMBAC sent several messages to members (and was announced at the conference) so members expect this invitation.
3. Permissions requested by EMBAC warning:
Upon clicking the provided link, my concerns deepened as I encountered an even more alarming warning from Microsoft:
Permissions requested by EMBAC. By accepting, you allow the organization to:
* Receive your profile data
* Collect and log your activity
* Use your profile and activity data
You should only accept if you trust EMBAC. EMBAC has not provided links to their terms to review.
> Entra ID requires certain permissions to extend a seamless user experience, and we are committed to maintaining the highest level of security and privacy while providing our service. Here is the explanation for each requested permission:
- Receive your profile data: This permission is required for authentication purposes and allows us to identify you as a user within our system.
- Collect and log your activity: We collect anonymized data about your activity within our platform for analytical purposes only, to improve our services, troubleshoot any issues, and offer you an enhanced user experience.
- Use your profile and activity data: This permission is for personalizing your experience on our platform and offering more relevant content and suggested interactions based on your activities.
4. EMBAC has not provided a link to their privacy statement warning:
This invitation email is from EMBAC (embacresearchdashboard.org) and may include advertising content. EMBAC has not provided a link to their privacy statement for you to review. Microsoft Corporation facilitated sending this email but did not validate the sender or the message.
> Regarding the missing links to our terms, we apologize for any inconvenience. You can review EMBAC’s Privacy Policy on our official website.
If you have continued concerns...
If you are still concerned about granting these permissions, we understand. Most privacy warnings are standard notifications when engaging Microsoft Entra ID (formerly called Azure Active Directory) and Power BI. We do not have control over these default notifications and this process is required to access the EMBAC Dashboard.
We hope this clarifies your concerns and assures you of the privacy measures we have in place. If you have any additional questions or concerns, please do not hesitate to reach out to our support team: https://link.bschoolresear.ch/EMBACsupport