Embed token generation fails for user with 'Contributor' or 'Viewer' role.

[Anonymous]

Hi,

We are trying to create embed token for a user (not a service principle) who is on 'Contributor' role in the workspace. We are getting http 500 'Forbidden' error and the error message is "Only folder user with reshare permissions can generate embed token". 

We added reshare permission in the dataset for the user. Still we are experiencing the same error. If we assign 'Admin' or 'member' role, we are able to generate the embed token for the user.

We are using live connection to the azure analysis service cube.

We ideally want the user to have 'contributor' or 'viewer' role and generate embed token. Any help on this issue will be much appreciated.

Thanks

[ibarrau · Accepted solution]

Hi. You just can't. Like the message says only users with that permission can, those are Member and Admin. You can check the things each role can do in this post: https://docs.microsoft.com/en-us/power-bi/collaborate-share/service-roles-new-workspaces

I hope that helps,

P/D I have always used service principal for embeded purpose