User able to Edit the Power BI Report in Javascript SDK with Embed Token Genereated for View only

[Anonymous]

I have embedded the power bi report using service principal as given here.

I'm generating the embed token as below,

var generateTokenRequestParameters = new GenerateTokenRequest(accessLevel:"View",allowSaveAs:false,identities: new EffectiveIdentity[] { new EffectiveIdentity(username: serviceAccount, roles: new string[] { "Viewer" }, datasets: new string[] { report.DatasetId }) });
EmbedToken embedToken = client.Reports.GenerateTokenInGroup(groupId, reportId, generateTokenRequestParameters);

But when I embed the report using javascript sdk, if I configure the permission as below the user able to edit the reports. How can prevent the user from editing the report in the embed token?

permissions: models.Permissions.ReadWrite,
viewMode: models.ViewMode.Edit,

[v-yulgu-msft]

Hi @Anonymous ,

You may modify above code as below to grant read-only permission. 

permissions: models.Permissions.Read,
viewMode: models.ViewMode.View,

For detailed description and sample code, please see: Embed Configuration Details

Best regards,

Yuliana Gu

[Anonymous]

Hi @v-yulgu-msft ,

   Thanks for your reply. But some one can potentially change the line as below and update the report.

permissions: models.Permissions.ReadWrite,
viewMode: models.ViewMode.Edit,

Thanks