<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Power Bi Embedded RLS with REST API in Developer</title>
    <link>https://community.fabric.microsoft.com/t5/Developer/Power-Bi-Embedded-RLS-with-REST-API/m-p/240434#M7517</link>
    <description>&lt;P&gt;We are creating new Reports via the embedd API of PowerBI Premium with RLS. For embedding in VIEW and EDIT mode the provided EffectiveIdentity works well. But when it comes to accessLevel CREATE we get "Forbidden" response.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;PRE&gt;var requestParameters = new GenerateTokenRequest(
	"create",
	datasetId,
	allowSaveAs: false
	identities: new List&amp;lt;EffectiveIdentity&amp;gt; { new EffectiveIdentity(UserId, roles: ["Role1"], datasets: new List&amp;lt;string&amp;gt; { datasetId }) }
);&lt;/PRE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Is RLS supported in CREATE mode? When yes, how can we get a token with correct RLS settings?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Mon, 28 Aug 2017 14:04:36 GMT</pubDate>
    <dc:creator>Anonymous</dc:creator>
    <dc:date>2017-08-28T14:04:36Z</dc:date>
    <item>
      <title>Power Bi Embedded RLS with REST API</title>
      <link>https://community.fabric.microsoft.com/t5/Developer/Power-Bi-Embedded-RLS-with-REST-API/m-p/240434#M7517</link>
      <description>&lt;P&gt;We are creating new Reports via the embedd API of PowerBI Premium with RLS. For embedding in VIEW and EDIT mode the provided EffectiveIdentity works well. But when it comes to accessLevel CREATE we get "Forbidden" response.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;PRE&gt;var requestParameters = new GenerateTokenRequest(
	"create",
	datasetId,
	allowSaveAs: false
	identities: new List&amp;lt;EffectiveIdentity&amp;gt; { new EffectiveIdentity(UserId, roles: ["Role1"], datasets: new List&amp;lt;string&amp;gt; { datasetId }) }
);&lt;/PRE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Is RLS supported in CREATE mode? When yes, how can we get a token with correct RLS settings?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Mon, 28 Aug 2017 14:04:36 GMT</pubDate>
      <guid>https://community.fabric.microsoft.com/t5/Developer/Power-Bi-Embedded-RLS-with-REST-API/m-p/240434#M7517</guid>
      <dc:creator>Anonymous</dc:creator>
      <dc:date>2017-08-28T14:04:36Z</dc:date>
    </item>
    <item>
      <title>Re: Power Bi Embedded RLS with REST API</title>
      <link>https://community.fabric.microsoft.com/t5/Developer/Power-Bi-Embedded-RLS-with-REST-API/m-p/241723#M7552</link>
      <description>&lt;BLOCKQUOTE&gt;&lt;HR /&gt;@Anonymous wrote:&lt;BR /&gt;
&lt;P&gt;We are creating new Reports via the embedd API of PowerBI Premium with RLS. For embedding in VIEW and EDIT mode the provided EffectiveIdentity works well. But when it comes to accessLevel CREATE we get "Forbidden" response.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;PRE&gt;var requestParameters = new GenerateTokenRequest(
	"create",
	datasetId,
	allowSaveAs: false
	identities: new List&amp;lt;EffectiveIdentity&amp;gt; { new EffectiveIdentity(UserId, roles: ["Role1"], datasets: new List&amp;lt;string&amp;gt; { datasetId }) }
);&lt;/PRE&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Is RLS supported in CREATE mode? When yes, how can we get a token with correct RLS settings?&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;HR /&gt;&lt;/BLOCKQUOTE&gt;
&lt;P&gt;@Anonymous&lt;/P&gt;
&lt;P&gt;Based on my &amp;nbsp;test, the&amp;nbsp;GenerateTokenRequest underlying is calling the REST API&amp;nbsp;&lt;A href="https://msdn.microsoft.com/en-us/library/mt784614.aspx" target="_self"&gt;GenerateToken&lt;/A&gt;. And at this moment, the API&amp;nbsp;doesn't support creating embed token with effective identity for reasources of type Report Creation&amp;nbsp;or&amp;nbsp;dashboard.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;BLOCKQUOTE&gt;&lt;HR /&gt;&lt;a href="https://community.fabric.microsoft.com/t5/user/viewprofilepage/user-id/35536"&gt;@yuryb&lt;/a&gt; wrote:&lt;BR /&gt;
&lt;P&gt;Indeed, currently RLS is only supported for embedded reports. Support for embedded dashboards will come later, no concrete dates yet.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Best regards&lt;/P&gt;
&lt;HR /&gt;&lt;/BLOCKQUOTE&gt;
&lt;P&gt;&amp;nbsp;Confirmed with Power BI staff&amp;nbsp;&lt;a href="https://community.fabric.microsoft.com/t5/user/viewprofilepage/user-id/35536"&gt;@yuryb&lt;/a&gt;&amp;nbsp;in this &amp;nbsp;thread&amp;nbsp;&lt;A href="https://community.powerbi.com/t5/Developer/Pass-username-and-role-in-token-request-for-RLS-to-work-with-an/td-p/222667/page/2" target="_self"&gt;Pass username and role in token request for RLS to work with an embedded app-owns-data report&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 30 Aug 2017 02:12:27 GMT</pubDate>
      <guid>https://community.fabric.microsoft.com/t5/Developer/Power-Bi-Embedded-RLS-with-REST-API/m-p/241723#M7552</guid>
      <dc:creator>Eric_Zhang</dc:creator>
      <dc:date>2017-08-30T02:12:27Z</dc:date>
    </item>
  </channel>
</rss>

