embedded javascript security risk question

Hi rnehrboss ,

The problem is that different users will get the same token. For the dataset, the kind of data it can give to the user is based on the token.

If you want different users to get different tokens with different permissions, then there are only two ways to do that according to the official documentation.

• If you are handling data from multiple customers, consider these two approaches for securing your data: Workspace-based isolation and Row-level security-based isolation.

For more details, you can refer this link.

Generate an embed token in Power BI embedded analytics - Power BI | Microsoft Docs

Best Regards

Community Support Team _ chenwu zhu

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.