Cross-domain Power BI embedding using Master User

[luffa221B]

I am new to Azure. Previously I had setup Power BI embed using one account.

Now I want to setup Power BI workspace in one account say in Domain A, and Azure in another account say in Domain B. For this the accounts have all the subsriptions and roles required. I created a guest user in Azure of A for B. Then added this user in workspace using Manage Access. Also this guest user has Microsoft Fabric role. When I try to run python code provided by microsoft from github, it generates Access Code but gives Unauthorised when trying to generate Embed Token. 

I think there is some access or setting required that I don't know. Also is this even feasible? I didn't find any other setups like this on net, only ChatGPT telling me that this is possible 🥲

[Anonymous]

Hi @luffa221B 

According to your description the error type is unauthorized, please check the following points:

1. Ensure that guest user permissions and cross-tenant access are set correctly in Azure AD.

Configure guest user access 

Cross-tenant access settings - Microsoft Entra External ID | Microsoft Learn

2. Ensure that service principal and embed content are enabled in Power BI Services Tenant settings, added the security group. 

Embed Power BI content in an embedded analytics application with service principal and an applicatio...

Embed content in your Power BI embedded analytics application - Power BI | Microsoft Learn

Best Regards,
Jarvis Tang
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.