User Assigned Managed Identity Authorization for Power BI REST API and Embed

[seemasam]

We have created a User Assigned Managed Identity ( Note: Not a System Assigned Managed Identity nor Normal App Reg).

1. Can I authorize Power BI REST API calls with User Assigned Managed Identity?
   

   Using User Assigned Managed Identity authorization to Power BI REST API calls we get Unauthorized access.

   We tried to add the Power BI Service API Permissions on the User Assigned Managed Identity using Az CLI, but that also did not fall into the right place.

2. Can I implement Power BI Embedded with User Assigned Managed Identity?

Thanks for the help in advance

[seemasam]

@AmosHersch 
1. Yes, my scenario is with a combination of Power BI Embedded and Power BI REST API.

2. Unauthorized for all the Power BI REST API calls are thrown.

I am using the Power BI REST API to generate the tokens, with the Auth Token as Azure AD Token generated for the User Assigned Managed Identity.

We did try to add the Power BI Permissions to the User Assigned Managed Identity, but it all fell under the MS Graph API.

[AmosHersch]

Hi @seemasam ,

I believe your scenario is supported in Power BI embedded.

Which API(s) failed for you? Did you give your user permissions for the relevant workspace?

Did you check if the response message body has additional information regarding the reason of the Unauthorized error?

[Lasantha]

Hi are there any documentation specifically on PBI Embedded and Managed Identity combination please?

We are struglling to find any reference on this topic. 

Basically we need to be able to embed PBI Embedded hosted reports in a webpage with Manged Identity, hiding tokens from the client. thanks