How To Obtain Report ID of RDL/Paginated Report that's embedded inside PowerBI Report?

Hi AmosHersch thanks for getting back to me so quickly.

Great, at least you've confirmed my understanding, so we're on the same page 🙂

How/where can I get this logged as a Feature/Bug (interesting, it's a bug in the design of the combination of all the APIs, not so much an individual thing).

Right now, the 'new' feature of embedding an RDL inside a PBIX can not be used completely securely in the 'app owns data' method.

I suppose, to summarise this as a bug we would write.

Steps:

1. Create PBIX Report with embedded RDL Report 
2. Using the Get Reports in Group API  (https://docs.microsoft.com/en-us/rest/api/power-bi/reports/get-reports-in-group) - obtain the GUIDS/Report IDs of the PBIX Report we want to show to the user - we then 'save' this value against this user for his/her dashboard/access level.
3. Use Generate a Token API (https://docs.microsoft.com/en-us/rest/api/power-bi/embed-token/generate-token#generate-an-embedtoken-for-a-power-bi-report-with-a-paginated-visual.-the-paginated-report-id-%22(f904e89a-7ebe-4aa0-8647-e409063b4850)%22-of-the-paginated-visual-has-to-be-included-in-the-report-ids-section.) , passing in the Datasets/PBIX Ids. Additionally, the PBIX 'may' contain an embedded RDL file, so re-use Get Reports in Group API, pass in the workspace ID, filter by Report Type, obtain the IDs of ALL the RDL Files. in the workspace.

Expected Result

The generated Token will provide access to exactly the one PBIX report and just the RDL Reports that are contained within it.

Actual Result

The generated Token will provide access to exactly the one PBIX report and ALL the RDL Reports in the same Workspace, regardless of their relationship with the PBIX.

Suggested Solution

Update Get Report API (https://docs.microsoft.com/en-us/rest/api/power-bi/reports/get-report) to also include a 'linked reports' or 'embedded reports' or 'additional resource ids' or 'dependant report ids' section.

This would be used just before generating the Access Token, to obtain the embedded reports. Then the Access Token request will only contain the Datasets/PBIX IDs and the RDL IDs that are embedded within it.