Embedding Reports from a non-premium workspace

[gabrielschon]

hi all, 

I`m testing powerbi Embedded created in azure portal. I got the smallest price tier for testing purpose and associated it with a workspace in our organization environment. The workspace got the diamond and I was able to embeded a dashboard/report without  issues. 

However, when I configure my .Net app with a Report ID that is not in the workspace associate with premium, i was still able to embed it and access it without a power bi user. I perceive this as a security problem (since our organization is quite big and other workspaces can have confidentail info). 

Any one experienced the same behavior? 

[tarostok · Accepted solution]

Hi,

I guess you use "App owns data" embedding.

If so, your code requests "EmbedToken" for a specific report, if your "master user" is an adim of the workspace in which this report rsides (regardless if it is in Premuim capacity or not) he can ask for EmbedToken for it.

Thanks,

Tal

[gabrielschon]

Ok, that means you don`t need the full premium then. You can just stick to the super user who has access to all workspaces 🙂