Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
7 years ago

User able to Edit the Power BI Report in Javascript SDK with Embed Token Genereated for View only

I have embedded the power bi report using service principal as given here.

I'm generating the embed token as below,

var generateTokenRequestParameters = new GenerateTokenRequest(accessLevel:"View",allowSaveAs:false,identities: new EffectiveIdentity[] { new EffectiveIdentity(username: serviceAccount, roles: new string[] { "Viewer" }, datasets: new string[] { report.DatasetId }) });
EmbedToken embedToken = client.Reports.GenerateTokenInGroup(groupId, reportId, generateTokenRequestParameters);

But when I embed the report using javascript sdk, if I configure the permission as below the user able to edit the reports. How can prevent the user from editing the report in the embed token?

permissions: models.Permissions.ReadWrite,
viewMode: models.ViewMode.Edit,

 

APIS and Embedding

2 Replies

  • v-yulgu-msft's avatar
    v-yulgu-msft
    Microsoft Employee
    7 years ago

    Hi Anonymous ,

     

    You may modify above code as below to grant read-only permission. 

    permissions: models.Permissions.Read,
viewMode: models.ViewMode.View,

    For detailed description and sample code, please see: Embed Configuration Details

     

    Best regards,

    Yuliana Gu

    • Anonymous's avatar
      Anonymous
      Not applicable
      7 years ago

      Hi v-yulgu-msft ,

       

         Thanks for your reply. But some one can potentially change the line as below and update the report.

       

      permissions: models.Permissions.ReadWrite,
      viewMode: models.ViewMode.Edit,

       

      Thanks