I cannot disable Block Public Internet Access in the PowerBI Tenant

Thank you for reaching out. The Block Public Internet Access setting can be locked and enforced at a higher security or governance level, which prevents Power BI tenant admins from modifying it. Common reasons include:

1. Microsoft Defender for Cloud/ Tenant security baseline
   1. The setting may be enforced by an organization-wide security policy.
2. Azure Policy or Management Group enforcement
   1. If your Power BI tenant is governed by Azure policies, this setting may be locked at the subscription or management group level.
3. Tenant created under a restricted Microsoft 365 environment
   1. Some tenants (especially enterprise or regulated tenants) have public access permanently restricted by design.
4. Publish to web disabled at tenant level
   1. When public sharing is restricted, the related internet access control is automatically locked.

Required check and actions

1. Confirm required admin role
   Ensure you are signed in with one of the following roles:
   1. Global Administrator
   2. Power BI Service Administrator
   Power BI Admin role alone may not be sufficient if higher level policies are applied.\
2. Check publish to web setting Go to :

      PowerBI service -> Admin portal -> Tenant settings -> Publish to web
   

   1. Ensure Publish to web is enabled for the required users or security groups.
   2. if this setting is also greyed out, it confirms higher-level enforcement.
3. Verify Microsoft Defender/ Security Defaults Ask you Global Admin/ security admin to review:

      Microsoft 365 Defender -> Cloud Apps / Security Policies
   

   if a policy enforces blocking public access, it must be modified or exclude.
4. Check Azure Policy enforcement If you organization uses Azure governance:
   1. Review Azure Policy assignments
   2. Check Management Groups or Subscriptions linked to Power BI Only Azure or Tenant-level admins can modify these.

Please let us know if you require any further assistance we’re happy to help. If you found this information useful, kindly mark this as "Accept Answer".

If the "Block Public Internet Access" setting is greyed out in your Power BI tenant settings, it may be due to certain constraints or policies set at the organizational level. Here are a few steps you can take:

1. Check Organizational Policies: Ensure that there are no overarching policies or configurations that prevent changes to this setting. Sometimes, settings can be locked by higher-level administrators or organizational governance policies.
2. Permissions Review: Confirm that your admin rights are sufficient to make changes to this particular setting. Even with admin rights, certain permissions might be restricted based on your organization's governance structure.
3. Consult Documentation: Review the documentation related to tenant settings and the implications of blocking public internet access. This can provide insights into why the setting might be restricted.
4. Contact Support: If you continue to face issues, consider reaching out to Microsoft support for assistance. They can provide specific guidance based on your tenant's configuration.

Disabling this setting is essential for enabling Web Publishing, so it’s important to resolve this issue to proceed with your requirements.