Embedding report - unauthorized when report is shared

[lkarolak]

This is the scenario we have: an ASP.net application in which the users are authenticated via Azure AD. This application should embed a report from Power BI service. The report is in a premium capacity workspace.

When a user is a member of the workspace (with view permissions only), then the embedding works correctly, the token is retrieved and the report is displayed in out ASP.net webapp.

However, when the user is not a member of the workspace, but I have shared the report with the user using the "Share" functionality in Power BI, then I am getting 401 Unauthorized when trying to get the embed token for this report.

This is the code I am using:

 using (var client = new PowerBIClient(new Uri(ApiUrl), tokenCredentials))
                {
                    // this is where the exception (401) happens...
                    report = client.Reports.GetReportInGroup(GroupId, ReportId);
        

                    // further code...
}

When I open the report in the Power BI service, I can see it correctly...only the embedding fails.

Is there a possibility to embed a report , when it's "only" shared?

[v-micsh-msft]

Try to switch the user token to 

Access token for non-Power BI users (app owns data)

This way should make the App be able to display reports correctly.

More information, please check:

Authenticate users and get an Azure AD access token for your Power BI App

Regards,

Michael

[lkarolak · Accepted solution]

Thank you, @v-micsh-msft

I think I figured it out myself.

Since the users with which I shared the report were not members of the group, the line:

client.Reports.GetReportInGroup(GroupId, ReportId);

failed with 401 obviously, because the access to the group was denied.

Then I did this:

client.Reports.GetReports()

and from the list I received I filtered the report I needed and then it worked.

Thanks!