Embedding for Non-Power BI users

[Anonymous]

I have a very simple question that I havn't been able to find a clear answer for, maybe it comes down to my limited knowledge of web-development / security. Case:

* My customer wants to embed Power BI content into a website. Non Power BI users are supposed to have access to the data, so we are looking at a pro license for key users + an EM1 license model. So am I correct in assuming, that in these "app owns data" scenarios, the only limitation to accessing this embedded content for any user, is the access restriction to that website/app? So theoretically, if I embedd the content on a public website, everyone in the world with an internet connection can see it?

Thanks in advance for making this crystal clear.

[Eric_Zhang · Accepted solution]

---

@Anonymous wrote:

I have a very simple question that I havn't been able to find a clear answer for, maybe it comes down to my limited knowledge of web-development / security. Case:

* My customer wants to embed Power BI content into a website. Non Power BI users are supposed to have access to the data, so we are looking at a pro license for key users + an EM1 license model. So am I correct in assuming, that in these "app owns data" scenarios, the only limitation to accessing this embedded content for any user, is the access restriction to that website/app? So theoretically, if I embedd the content on a public website, everyone in the world with an internet connection can see it? 

Thanks in advance for making this crystal clear.  

---

@Anonymous

Yes. the access restriction in the website controls who can access the embeded content. However you can still apply RLS to limit users see their individual data. Note that at this moment the RLS only works for the old "Power BI Embedded", "Embedding for Non-Power BI users" is a new placement and the correlated RLS feature is not available and will be released in next quarter.

Can every one in the world see it? Yes, if you put it in a public website without setting RLS. However, for cost saving, if you'd like the embedded reports internet public, you can see "publish to web" as a fore reply mentioned.

[Anonymous]

Thanks both for your replies. I feel the later most clearly answers my question, so I accepted that as the answer. 

[Anonymous]

Will there be any authentication for the website?

You can either use embedding (https://powerbi.microsoft.com/en-us/documentation/powerbi-developer-embedding-content/) where you have the control to whom you give the access token.

Or you can use publish to web (https://powerbi.microsoft.com/en-us/documentation/powerbi-service-publish-to-web/) where everyone can see the shared resource.

The difference is that you need a Premium license for the first embedding scenario.