topic Re: Accessing dataset requires effective identity username identical to the caller's principal name in Developer

Accessing dataset requires effective identity username identical to the caller's principal name.

JavierOrd — Wed, 21 Apr 2021 08:52:20 GMT

Hi,

I am having some issues adquiring token to access Power BI reports with Azure Analysis Services sources.

My web app is App Owns Data with a Master User account who passes an effective identity to the reports. When the effective identity is different from Master User (most cases) it throws the next error:

Creating embed token for accessing dataset requires effective identity username to be identical to the caller's principal name.

But the idea of Power BI embedded is allowing users outside my organization to have access to my reports, so I do not understand this error.

Any suggestions?

PS: import mode reports work.

Thanks

Re: Accessing dataset requires effective identity username identical to the caller's principal name

Anonymous — Fri, 23 Apr 2021 02:04:04 GMT

Hi @JavierOrd,

Have you tried to use the 'service principal' mode to embed these contents? AFAIK, 'master user' mode seems to share the main user credentials for other user usages.

Tutorial: Embed Power BI content using a sample embed for your customers application
Regards,

Xiaoxin Sheng

Re: Accessing dataset requires effective identity username identical to the caller's principal name

JavierOrd — Tue, 27 Apr 2021 07:20:30 GMT

Hi @Anonymous,

I will explore service pricipal mode and let you know.

Thank you.

Re: Accessing dataset requires effective identity username identical to the caller's principal name

JavierOrd — Tue, 27 Apr 2021 11:57:17 GMT

Hi @Anonymous ,

Service principal mode throws the same error. I have verified Service principal works correctly when opening connection to Power BI report with SSAS on premise (I just had to add Service principal id to the on prem gateway).

So I am in the same scenario of my first post.

Re: Accessing dataset requires effective identity username identical to the caller's principal name

Anonymous — Thu, 29 Apr 2021 07:29:04 GMT

HI @JavierOrd,

How did you configure the service principal?
AFAIK, you need to create a security group on the azure site to add the service principal as a group member. Then you need to add that group to power bi workspace that stores embedded content.
For gateway data source settings, you can configure it to work for workspace members.
Regards,
Xiaoxin Sheng

Re: Accessing dataset requires effective identity username identical to the caller's principal name

GunnarHo — Mon, 12 Jul 2021 12:08:38 GMT

Hi @JavierOrd , @Anonymous
unfortunatly we have the same issue.
We run Power BI embedded with Azure Analysis Services, until now with PBI MasterUser for authentification. As recommanded by Microsoft, we want to use a ServicePrincipal for the authentification.
We use the newest apps-own-data VS Solution and modified the Souce Code:

identities: new List<EffectiveIdentity> { new EffectiveIdentity(
username: "App ID ", // App ID from Azure
datasets: new List<string> { "Dataset ID" },
roles: new List<string>() { "RoleA" }
// customData : "XXX"
) }

But no matter which Account we use for the username (SP Application ID, Object ID), we get the following error:
Creating embed token for accessing dataset <my-data-set-guid> requries effective identity username to be identical to the caller's principal name.
The settings from the ServicePrincipal and in Power BI Service are exactly as described in the MS documentations.
Any Ideas, or Solutions?
Thank you in advance!

Re: Accessing dataset requires effective identity username identical to the caller's principal name

Anonymous — Wed, 25 Aug 2021 12:55:21 GMT

Hi GunnarHo,

Did you able to find the solution for your query using Service Principal for authentication?

I am trying to export Power BI reports (PDF) based on RLS for users, but it comes with the same error.

Thanks

Ritesh

Re: Accessing dataset requires effective identity username identical to the caller's principal name

GunnarHo — Fri, 27 Aug 2021 15:54:13 GMT

Hi Ritesh,

yes, you have to use the Principal object ID of the Service Principal instead of the Application object ID.

Here you can find further informations:

https://docs.microsoft.com/en-us/power-bi/developer/embedded/embedded-troubleshoot#what-is-the-difference-between-application-object-id-and-principal-object-id

In our Scanario, this was the solution, now ist works.

Kind regards

Re: Accessing dataset requires effective identity username identical to the caller's principal name

Anonymous — Mon, 06 Dec 2021 14:37:43 GMT

Hi ,

I am also receiving an error [ Accessing Dataset requires an effective identity to be provided ]

Iam trying to embed a report using service principle app owns data methods.

My report has live connection to Azure analysis services.

I have also granted the admin concent to the app still throwing error.

If any one faced same issue please to resolve this

Re: Accessing dataset requires effective identity username identical to the caller's principal name

Joel-Reaccess — Thu, 23 Mar 2023 11:23:42 GMT

This post explains how to fix this issue:

https://stackoverflow.com/questions/56050580/unable-to-generate-embed-token-for-accessing-dataset-due-to-missing-roles-in-eff

Re: Accessing dataset requires effective identity username identical to the caller's principal name

Deepanshi_Ranka — Thu, 27 Apr 2023 10:27:21 GMT

I am gettimg the same error. Does anyone have any solution to this.

Re: Accessing dataset requires effective identity username identical to the caller's principal name

Anonymous — Wed, 27 Mar 2024 16:33:03 GMT

Encountered the same problem, I have a suspicion that due to the fact that I am working across two tenants this may be the cause.
Did you set the SP as Server Admin for your AAS? I found some documentation saying that this is necessary and it'll be my next step. Here is the link:
Embed a Power BI report with an Azure Analysis Services (AAS) database - Power BI | Microsoft Learn