Need help - Embedding RLS in GenerateTokenRequestV2Report - BadRequest

[JamesMinton]

Hello,  

First time posting! 

I'm having troubles when trying to add RLS in my Power Bi embedding application.

This is how my application was working before trying to add RLS 

I then tried to do the following 

(Side note : the username and roles are just testing, I'm not sure what I'm going to put there yet, I just want to see the token generate again)

This code not BadRequest errors on the pbliClient.EmbedToken.GenerateToken(tokenRequest); line

Does anyone have any ideas of where I'm going wrong? I'm new to PowerBi Embedding 

Thanks for your time,  

James

[JamesMinton]

Thank you for your reply!

Any idea why I might be getting that BadRequest error though?

[v-jianboli-msft]

Hi @JamesMinton ,

With Row Level Security (RLS), the identity you use can be different from the identity of the service principal or master user you're using to generating the token. By using different identities, you can display embedded information according to the user you're targeting. For example, in your application you can ask users to sign in, and then display a report that only contains sales information if the signed in user is a sales employee.

If you're using RLS, you can sometimes leave out the user's identity (the EffectiveIdentity parameter). When you don't use the EffectiveIdentity parameter, the token has access to the entire database. This method can be used to grant access to users such as admins and managers, who have permission to view the entire dataset. However, you can't use this method in every scenario. The table below lists the different RLS types, and shows which authentication method can be used without specifying a user's identity.

Here is the considerations and limitation applicable to each RLS type.

Besides, you can find some examples here:  Embed Token - Generate Token - Examples| Microsoft Learn

For more details, please refer to:

Security in Power BI embedded analytics - Power BI | Microsoft Learn

Best Regards,

Jianbo Li

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.