Embed for your organization & mimimum level of permissions needed to run report

[WindFarmer]

Hello dear Power BI Developers,

We have a particular setup that we can't get to work properly. 

1. We are creating Power BI Embed for your organization (user owns data)
   • we do have Premium capacity
   • we are using Service Principal, properly assigned as Admin of Workspace
2. We have a report that we wish to embed
   • its rather simple report
   • it does have dynamic RLS pattern enabled (USERPRINCIPALNAME)
   • we are trying to use AD groups to manage access through group membership
3. We are following documentation when setting everything up

We are struggling with workspace/object level permissions.

I would assume that we would give users the same type of permissions that are needed to view report via Power BI Service ('read' on report and dataset and RLS role-usergroup pairing), but this does not work when trying to access report via iframe (it works just fine when accessing report directly). I'm gradually lifting permissions by adding (every possible combination I can think of) 'reshare' and 'build' on both report and dataset, but it does not work and we are reciving "unauthorised" error via iframe. It starts to work when we reach 'member' at Workspace level, which is not acceptable level of permission for end users from security and maintanance standpoint.

Please advise or at least confirm what is the minimum level of end users access permission level that is required to run report as embedded solution.

[v-yiruan-msft · Accepted solution]

Hi @WindFarmer ,

If I understand correctly, you are trying to create embed for organization solution using service principal. And you got the unauthorized error. According to the following official documentation, Embed for your organization applications can't use service principal.

Considerations and limitations

You can refer the following links to embed for your organization:

Embed content in your Power BI embedded analytics application for your organization - Power BI | Mic...

Embed Power BI Report for Organization using User Owns Data | Part 9 - Bing video

Best Regards