How to secure web-embedded reports with RLS?

[ctoscher]

Researching methods for embedding reports in web applications, the results are endless with so much documentation that it's confusing.

There are way too many ways to connect applications and secure them, and some of the documentation gives different steps to achieve same results.

What documentation should be followed for embedding reports into a web application and securing it for RLS?

We're using Node.js for development and have Power BI Premium per capacity licenses; do we also need to purchase Embedded licensing? It's kinda confusing.

[Anonymous · Accepted solution]

Hi @ctoscher,

You can take a look at the following links to know more about embedded features:

tutorial of embedded configurations:

Embed content in your Power BI embedded analytics application - Power BI | Microsoft Docs

Embedded contents with RLS:

Using row-level security with embedded content in Power BI embedded analytics - Power BI | Microsoft...

BTW, premium licenses already include the power bi embedded features. You do not need to purchase it for embedded feature usage.

Capacity and SKUs in Power BI embedded analytics - Power BI | Microsoft Docs

Regards,

Xiaoxin Sheng

[ctoscher]

Thank you Xiaoxin,

We've been working through this documentation, but have reached a point where we're not sure how to use the API because it seems to contradict the documentation (Node.js).

In the app owns data (embed for customers) documentation, Step 1 - Select your authentication method states that the Azure AD delegated permissions are not required for Service principal method of authentication. In the Master user section, it states that a master user or an administrator has to grant consent for your app to access Power BI REST API permissions (also known as scopes).

In the Power BI Developer Samples (here is the link to actual file and line of code) it uses config.scope. The config file has a scope of https://analysis.windows.net/powerbi/api.

We are not exactly sure what we need to put here in place of the scope value in the json file as the documentation states it's not required, but the code clearly requires a scope value to be set.

Thank you,

Colton

[Anonymous]

Hi @ctoscher,

As you said, this scope parameter seems not needed for the embedded function usage. In my opinion, I suppose they may be used for other types of azure features/services. (e.g. audit or activity logs of user operations)
Regards,
Xiaoxin Sheng