Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

The Power BI DataViz World Championships are on! With four chances to enter, you could win a spot in the LIVE Grand Finale in Las Vegas. Show off your skills.

Reply
ldd123
Frequent Visitor

Power BI Embed Options - App Owns Data, User Owns Data, any other option?

So far, it seems like authentication can be either done using the app owns data method (service principal or master user approach), or user owns data approach (user individually authenticates/logs in). I keep running into issues getting the correct power bi API permissions given to me to implement these approaches by my security department in a government setting.  I am trying not to use the user owns data approach because we are trying to embed in a seamless way, with no user interaction required to view Power BI content once they are signed into our web app. May be a silly question but, are these any other options on getting this to work?

1 ACCEPTED SOLUTION
v-linyulu-msft
Community Support
Community Support

Thanks for the reply from lbendlin , please allow me to provide another insight:

Hi, @ldd123 

I share lbendlin 's view that, regarding Power BI embedding methods, App Owns Data (embedded for customers) is indeed the most suitable option for your needs.

 

1.Here’s the distinction between "Embedding for Your Customers" and "Embedding for Your Organisation":

vlinyulumsft_0-1731294613138.png

"Embedding for Your Customers" eliminates the need for Power BI account authentication, making it more aligned with your requirements. This corresponds to what you mentioned about users being able to view Power BI content without further interaction once they log into our web application.

 

For further details, please refer to the documentation.

https://learn.microsoft.com/en-us/power-bi/developer/embedded/embedded-analytics-power-bi#comparison...
 

2.Regarding the issue of not obtaining the correct Power BI API permissions granted by my security department, this may be due to the Azure app lacking API permissions, insufficient role permissions for the Azure app in the workspace, or unmodified service settings.

 

If you have configured the Azure app step by step according to the documentation, you can find the relevant section in your Azure app to grant the necessary permissions based on your needs.

vlinyulumsft_1-1731294661258.png

Please note that after adding permissions, there is a confirmation step to ensure they are granted:

vlinyulumsft_2-1731294661260.png

The role permissions for the Azure app in the workspace should be at least set to Member.

For further details, please refer to the documentation.

Solved: Getting Operation returned an invalid status code ... - Microsoft Fabric Community
 

3.Below are responses to similar issues you might encounter, and I hope this information is helpful to you:
https://learn.microsoft.com/en-us/power-bi/developer/embedded/embed-service-principal#step-3---enabl...
Solved: How to Auto Login Power BI HTML Static Application - Microsoft Fabric Community

Solved: Power BI REST API, HTTP 401 - Microsoft Fabric Community

 

Best Regards,

Leroy Lu

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

View solution in original post

2 REPLIES 2
v-linyulu-msft
Community Support
Community Support

Thanks for the reply from lbendlin , please allow me to provide another insight:

Hi, @ldd123 

I share lbendlin 's view that, regarding Power BI embedding methods, App Owns Data (embedded for customers) is indeed the most suitable option for your needs.

 

1.Here’s the distinction between "Embedding for Your Customers" and "Embedding for Your Organisation":

vlinyulumsft_0-1731294613138.png

"Embedding for Your Customers" eliminates the need for Power BI account authentication, making it more aligned with your requirements. This corresponds to what you mentioned about users being able to view Power BI content without further interaction once they log into our web application.

 

For further details, please refer to the documentation.

https://learn.microsoft.com/en-us/power-bi/developer/embedded/embedded-analytics-power-bi#comparison...
 

2.Regarding the issue of not obtaining the correct Power BI API permissions granted by my security department, this may be due to the Azure app lacking API permissions, insufficient role permissions for the Azure app in the workspace, or unmodified service settings.

 

If you have configured the Azure app step by step according to the documentation, you can find the relevant section in your Azure app to grant the necessary permissions based on your needs.

vlinyulumsft_1-1731294661258.png

Please note that after adding permissions, there is a confirmation step to ensure they are granted:

vlinyulumsft_2-1731294661260.png

The role permissions for the Azure app in the workspace should be at least set to Member.

For further details, please refer to the documentation.

Solved: Getting Operation returned an invalid status code ... - Microsoft Fabric Community
 

3.Below are responses to similar issues you might encounter, and I hope this information is helpful to you:
https://learn.microsoft.com/en-us/power-bi/developer/embedded/embed-service-principal#step-3---enabl...
Solved: How to Auto Login Power BI HTML Static Application - Microsoft Fabric Community

Solved: Power BI REST API, HTTP 401 - Microsoft Fabric Community

 

Best Regards,

Leroy Lu

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

lbendlin
Super User
Super User

"app owns data"  seems to be the correct approach for you.  What are you struggling with?

Helpful resources

Announcements
Feb2025 Sticker Challenge

Join our Community Sticker Challenge 2025

If you love stickers, then you will definitely want to check out our Community Sticker Challenge!

Jan NL Carousel

Fabric Community Update - January 2025

Find out what's new and trending in the Fabric community.