Power BI Embedded - tutorial

[sba_ur]

Hi all,

I just came across Power BI Embedded Analytics - the case of Embed for your customers/App owns data. I am going through the tutorial link: https://learn.microsoft.com/en-us/power-bi/developer/embedded/embed-customer-app

From what I understand with this documentation, this case is ideal for sharing reports with external users and they do not need to sign in using PBI credentials to view the embedded content. Also, the app users do not need a license. 

I am trying to get an app on localhost working with this (Python app). Step 2 talks about app registration - I registered the app with a client secret. However, I do not have any API permissions configured. Are those needed? I am going for the service principal method. All other tenant level settings have been configured in Power BI. 

When I run my app with flask run, I get the error: 403 Forbidden: Error while retrieving Embed token
Forbidden: {"error":{"code":"InvalidRequest","message":"Embedding is disabled on tenant level"}}

What am I missing?

[V-yubandi-msft]

Hi @sba_ur ,
Could you please let us know if the issue is resolved, or if you need any further assistance?

Thank you.

[V-yubandi-msft]

Hi @sba_ur ,
If you get a chance, please review the response shared by @ibarrau . It’s clear and helpful.
Please take a moment to go through it and let us know if you need any additional details.

Thnak You.

[lbendlin]

You forgot to talk to your tenant admin about your project?

[sba_ur]

Incorrect, I actually have the access you mentioned. And all tenant settings are how they are recommended to make this work.

It was the API permissions that are not described in the tutorial. 

[ibarrau · Accepted solution]

Hi. Well, besides any azure permission that would be required for running requests against single categories like, if you want to get reports in a group you need report.ReadWrite and permission at workspace, there are additional settings to configure. At Fabric Admin portal, there are two mandatory settings:

Make sure the embed content and letting service principals call fabric public api are enabled for a security group that has the app registration in it, or even for the whole organization.

I hope that helps,