Power Bi Embedded RLS with REST API

[Anonymous]

We are creating new Reports via the embedd API of PowerBI Premium with RLS. For embedding in VIEW and EDIT mode the provided EffectiveIdentity works well. But when it comes to accessLevel CREATE we get "Forbidden" response.

var requestParameters = new GenerateTokenRequest(
	"create",
	datasetId,
	allowSaveAs: false
	identities: new List<EffectiveIdentity> { new EffectiveIdentity(UserId, roles: ["Role1"], datasets: new List<string> { datasetId }) }
);

Is RLS supported in CREATE mode? When yes, how can we get a token with correct RLS settings?

[Eric_Zhang · Accepted solution]

---

@Anonymous wrote:

We are creating new Reports via the embedd API of PowerBI Premium with RLS. For embedding in VIEW and EDIT mode the provided EffectiveIdentity works well. But when it comes to accessLevel CREATE we get "Forbidden" response.

var requestParameters = new GenerateTokenRequest(
	"create",
	datasetId,
	allowSaveAs: false
	identities: new List<EffectiveIdentity> { new EffectiveIdentity(UserId, roles: ["Role1"], datasets: new List<string> { datasetId }) }
);

Is RLS supported in CREATE mode? When yes, how can we get a token with correct RLS settings?

---

@Anonymous

Based on my  test, the GenerateTokenRequest underlying is calling the REST API GenerateToken. And at this moment, the API doesn't support creating embed token with effective identity for reasources of type Report Creation or dashboard.

---

@yuryb wrote:

Indeed, currently RLS is only supported for embedded reports. Support for embedded dashboards will come later, no concrete dates yet.

Best regards

---

 Confirmed with Power BI staff @yuryb in this  thread Pass username and role in token request for RLS to work with an embedded app-owns-data report