Hello, I am trying to embed a report with RLS and making sure the user can only view the report, no saving, copying, editing. I have the RLS working, but the embed token is able to be used with vi...
Thanks for the reply v-lili6-msft ,
I understand there is a secure way to do it but I am having trouble doing it or are misunderstanding something. I have attached a screenshot using API from the url you commented. It allows the user to see all the field names, data source names and gives the user the "editing" interface and options. There are options to save, but they result in this error. I want to at least make sure that the error is definitely caused because the embed token used doesn't have readwrite.all and only has read.all access. I need to make sure it's not a fluke that the report can't be saved and that I can rely on it to always fail for the user.