Forum Discussion

marcio_fornari's avatar
marcio_fornari
Resolver I
1 year ago
Solved

Generate Tokek Embedded - Error: proxy model should include the core model ID

i have a report conected with 3 datasets. Two has RLS.  The datasets ares in different workspaces.   To generate the token, my request contain all the datasets, body request: Post: https://api.pow...
Need Help
  • Anonymous's avatar
    Anonymous
    1 year ago

    Hi marcio_fornari,

     

    Thanks for the update, glad to hear you figured it out!

    Yes, this behavior makes sense. When generating the embed token using a master user, there can be permission issues, especially with composite models and RLS across different workspaces. That’s why using a service principal (which is the recommended approach for embedding) worked for you.

    Regarding your question : yes, you can skip RLS when using a service principal. To do that, simply don’t include the "identities" section in your GenerateToken request. If you don't pass any identities, Power BI won't apply RLS, and the service principal will see all the data in the report.

     

    If this post helps, then please consider Accepting as solution to help the other members find it more quickly, don't forget to give a "Kudos" – I’d truly appreciate it!

    Regards,

    B Manikanteswara Reddy

     

marcio_fornari's avatar
marcio_fornari
Resolver I
1 year ago

Hi, i found my error. I was generating the token with "master user". Generate token with "service principal" works. I don't understand why generate token with master user doesn't work, and a question. Can i ignore the RLS with "service principal" and open the report without the filter ?

Anonymous's avatar
Anonymous
Not applicable
1 year ago

Hi marcio_fornari,

 

Thanks for the update, glad to hear you figured it out!

Yes, this behavior makes sense. When generating the embed token using a master user, there can be permission issues, especially with composite models and RLS across different workspaces. That’s why using a service principal (which is the recommended approach for embedding) worked for you.

Regarding your question : yes, you can skip RLS when using a service principal. To do that, simply don’t include the "identities" section in your GenerateToken request. If you don't pass any identities, Power BI won't apply RLS, and the service principal will see all the data in the report.

 

If this post helps, then please consider Accepting as solution to help the other members find it more quickly, don't forget to give a "Kudos" – I’d truly appreciate it!

Regards,

B Manikanteswara Reddy

 

  • marcio_fornari's avatar
    marcio_fornari
    Resolver I
    1 year ago

    Thanks for the support