UserPasswordCredential problem

[daxu]

Hi,

Base on my understanding, to use powerbi embedded in my web app and serve external customers, we will have to use UserPasswordCredential other than the old AppKey TokenCredentials.

var credential = new UserPasswordCredential(Username, Password);

The Username will need to be a PowerBI Pro user account.

We have quite big security concern here, as the password will need to be stored somewhere and we can't force the password to expire every 30 days as in the company policy.

As this user needs to be a powerBI pro user and we have to create an App under this user, it implies that this user will be powerful user as well.

We have security concerns about this and wondering if there are ways to work around it?