Forum Discussion

AldoSaucedo's avatar
AldoSaucedo
Frequent Visitor
8 years ago

Use row-level security with Power BI embedded content

Hi All,

 

I'm trying to embed Power BI reports in a Web Application and I'm following this tutorials 

Embed a Power BI report for your customers    

Use Row-Level Security with Power BI embedded

and using the base code from Github sample App Owns Data Sample

 

My Power BI Reports are connected to an Azure Analysis Service Model and there I have some roles created to test the

Row-Level Security.

 

I'm trying to pass a test username from the app to the AAS Model in order to restrtric the data they can see based on the Roles created. Here's my code:

 

 

var rls = new EffectiveIdentity("[email protected]", new List<string> { report.DatasetId }, null, "[email protected]");
if (!string.IsNullOrWhiteSpace(roles))
{
   var rolesList = new List<string>();
   rolesList.AddRange(roles.Split(','));
   rls.Roles = rolesList;
}
// Generate Embed Token with effective identities.
generateTokenRequestParameters = new GenerateTokenRequest(accessLevel: "view", identities: new List<EffectiveIdentity> { rls });

But I get this error when trying to see the embedded report:

 

"Creating embed token for accessing dataset xxxxxxxxxxx requries effective identity username to be identical to the caller's principal name"

 

If I pass the caller's principal username the report obviusly works ok., but I want to pass another username to test 

Row-Level security. As you can see I'm also passing a value to CUSTOMDATA() property, which is being used in a DAX for one of my roles but my data is not being filtered correctly

 

 
Does anyone have and Idea on what could be happening or if I missing something?

 

Regards,

4 Replies

  • v-jiascu-msft's avatar
    v-jiascu-msft
    Microsoft Employee

    Hi AldoSaucedo,

     

    1. Is it a live connection?

    >>>The CustomData feature will only work for models that reside in Azure Analysis Services, and it only works in live mode. 

    2. Does it have same format with "DimFacilitySecurity[UserName]"?

     

     

    Best Regards,

    Dale

    • AldoSaucedo's avatar
      AldoSaucedo
      Frequent Visitor

      HI v-jiascu-msft,

       

      1 - Yes, is a live connection.

      2 - if you mean DimFacilitySecurity[UserName] has the same format as CustomData(), the answeer is yes

       

      DimFaciltySecurity table

       

      FacilityKey       FacilityName         UserName
      1                      Master Forms      [email protected]

       

      Regards,