Forum Discussion

sba_ur's avatar
sba_ur
Advocate II
8 months ago
Solved

Power BI Embedded - tutorial

Hi all,

 

I just came across Power BI Embedded Analytics - the case of Embed for your customers/App owns data. I am going through the tutorial link: https://learn.microsoft.com/en-us/power-bi/developer/embedded/embed-customer-app

 

From what I understand with this documentation, this case is ideal for sharing reports with external users and they do not need to sign in using PBI credentials to view the embedded content. Also, the app users do not need a license. 

 

I am trying to get an app on localhost working with this (Python app). Step 2 talks about app registration - I registered the app with a client secret. However, I do not have any API permissions configured. Are those needed? I am going for the service principal method. All other tenant level settings have been configured in Power BI. 

 

When I run my app with flask run, I get the error: 403 Forbidden: Error while retrieving Embed token
Forbidden: {"error":{"code":"InvalidRequest","message":"Embedding is disabled on tenant level"}}

 

What am I missing?

  • Hi. Well, besides any azure permission that would be required for running requests against single categories like, if you want to get reports in a group you need report.ReadWrite and permission at workspace, there are additional settings to configure. At Fabric Admin portal, there are two mandatory settings:

    Make sure the embed content and letting service principals call fabric public api are enabled for a security group that has the app registration in it, or even for the whole organization.

    I hope that helps,

5 Replies

    • sba_ur's avatar
      sba_ur
      Advocate II

      Incorrect, I actually have the access you mentioned. And all tenant settings are how they are recommended to make this work.

      It was the API permissions that are not described in the tutorial. 

      • ibarrau's avatar
        ibarrau
        Super User

        Hi. Well, besides any azure permission that would be required for running requests against single categories like, if you want to get reports in a group you need report.ReadWrite and permission at workspace, there are additional settings to configure. At Fabric Admin portal, there are two mandatory settings:

        Make sure the embed content and letting service principals call fabric public api are enabled for a security group that has the app registration in it, or even for the whole organization.

        I hope that helps,

  • Hi sba_ur ,
    If you get a chance, please review the response shared by ibarrau . It’s clear and helpful.
    Please take a moment to go through it and let us know if you need any additional details.

     

    Thnak You.

  • Hi sba_ur ,
    Could you please let us know if the issue is resolved, or if you need any further assistance?


    Thank you.