How to generate PowerBI Embedded URL and token in SPA (React) with B2C authentication?

[michael163]

We have an SPA application (React), which is using B2C workflows for sign in and need to show PowerBI Embedded report in the application. PowerBI report has row level security, so we can't use only one admin credentials to generate token. We know that token from B2C authorization is useless to PowerBI Embedded, but I want to generate token with API request to PowerBI Service. So the questions are: 

1) Is this even possible ? If not, how can I create token, fe. in HTTP trigger with RLS applied ? 

2) Is switching to Azure AD necessary to work ?

3) If my app registration for the application does not have API permissions for PowerBI Service, how can I make it work ? (We have subscription for the PowerBI, but it's not available to choose in API permissions for specific app registrations)