Forum Discussion

marcio_fornari's avatar
marcio_fornari
Icon for Resolver I rankResolver I
2 days ago

Dax - Execute Queries/RLS

It's possible execute dax query against dataset with RLS to Power BI Embedded? https://learn.microsoft.com/en-us/rest/api/power-bi/datasets/execute-queries To Power BI Embedded my users not need po...
Need Help
v-sathmakuri's avatar
v-sathmakuri
Icon for Community Support rankCommunity Support
1 day ago

Hi marcio_fornari​ ,

Thank you for reaching out to fabric community.

For Power BI Embedded (App owns data), the recommended approach is to generate the embed token with an EffectiveIdentity, passing the user's username and the RLS role:

{ "username": "user123", "roles": ["MyRLSRole"], "datasets": ["dataset-id"] }

The embedded user doesn't need a Power BI account. Power BI will apply the RLS role when querying the semantic model.

However, you can't pass the RLS role + username to the Execute Queries API using a service principal in the same way. impersonatedUserName has separate authentication/permission requirements and isn't a replacement for Embedded EffectiveIdentity.

Using standard cloud based row-level security with embedded content in Power BI embedded analytics - Power BI | Microsoft Learn

Thanks!!