Forum Discussion
Embed Vs Get Report in Group w/ RLS
Hi Xaraja ,
The only way to get your scenario working with free users and still have RLS respected is to either.
- Publish the report to a Power BI App (workspace in Fabric capacity) and give those ~150 users access to the App. They’ll open it from your other application via the App link, sign in with Azure AD, and RLS will apply automatically.
- Or go the App Owns Data route, where your app generates embed tokens with the user’s identity (effectiveIdentity) and passes it to Power BI so RLS works but this requires custom backend code.
As per my understanding you can’t pass a user identity with Get Report in Group. If you want “no coding,” publish to an App and give those users App access that will keep RLS intact and work with your Fabric capacity.
Hope that clears things up. If the above solution works for you, please accept it as the solution so that other community members with similar issues can benefit.
Thanks,
Akhil.
- Xaraja1 year agoHelper III
We do use Power BI Apps - our Pro users who develop reports publish them to apps within the Fabric workspaces and then the free users go to the Apps tab in Power BI and access the appropriate app for their work. But I didn't find a way to get an embed link for the actual app like you can for the report. I did see in the Microsoft documentation mention of a Microsoft Entra app, is that what you are referring to, rather than the Power BI app? Or is there a way to get an embed link for the actual Power BI app?