how we can implement static RLS with embedded report?

Guys..you and Patrick your content and stuff they're really great!

Yoooo Patrick, this video 2 weeks ago would solve many problems to me. I had to bang my head many times to figure this out. Also, did you note that you mic is a bit weird?

Hi! If you can change what goes in "username", meaning you can use dynamic RLS, with the code. Does this mean you only need power bi pro or premium licences for those who are going to create and share reports? How does this affect the Premium Capacity you need to buy? How can we estimate the costs of embedding the report on our web app? Thanks

Great video guys! Know of any workarounds or even maybe new features that would address page-level security? I would like to give specific users access to specific pages.

Any examples on how to pass multiple values in the username() parameter for example I need Power BI to filter by multiple states, 'NY, NJ, CA'

I am trying to embed a report with RLS on a SAP fiori based web app. The C# code mentioned here doesnt help. Any other way out ?

this was awesome. Thank you Adam!

Feel like you made this for me...lol Thanks Adam!

Thanks Adam, so clarifying

Amazing man! the problem is i had MFA enabled in azure. I have another dumb question though, after adding Roles, will it just automatically detect the users in our secured portal that matches the users in the dataset and let them view the report based on their roles?

Nice keep rocking … We need to buy azure embedded licenses for this ..?

Thank you, you helped me a great deal, appreciated. Great and informative video. PS: I was assuming roles (on EffectiveIdentity) could be null or even have an empty role but that kept giving me Bad Request :s

could it possible to GenerateTokenRequest using java, I am not able to find any maven dependency for this

Excellent

Awesome video :) I have a question: How do I correctly combine the embed URL and the token so that I can include it into an ? The playground does this in the background but I have to do it manually and I cannot figure out how to do it. I tried it and the report is not loading, so I think the token was not placed correctly in the URL

Thank you so much for this wonderful channel, I'm working with PowerBI Report Server, I have implemented Row-Level-Security and created one role on which every employee shall be assigned. . However, I have over 200 users using the reports. Is there a way to automatically assign every email adress of the users to this single role?

I have a base of 400 clients, will I have to create a license for each one to use the rls filter? the frontend filter is not secure and ends up allowing you to send any value.

I was trying to understand what is the default role for user who are not assigned to any role. Have you tried that? it seems that after creating a role, all users who are not assigned to any role will have NO access to the dashboard (which is weird!) - have you tried that?

Am trying to just list the existing RLS roles of a dataset in my PBI user account usgin the API, but nothing so far all the suggested endpoints are not found Any help please???

Hi I have a problem in getting multiple tables from a single Procedure. I have a procedure which is giving me 6 tables in return but I am able to see only one table in power bi. how to get all the tables at once in power BI.

Hi, I see you can do RLS security in BI Embedded. What about Object Level Security in Embedded Power BI?

Would this also work with Direct Query against an OnPremise Analysis Server via a Data Gateway?

So, is possible to share reports in my web app, and people who don't have pro license see it? With RLS structured by the web app?

Hey, i want to use ONLY the username not the roles to filter the data in Power BI Embedded. Can you please help me with how to do it?

Hi, Is this Embedded RLS will work on 2 fields (Program code and Child code) ?

Hello Adam, Will RLS work with Power BI Pro account on long run, Do we have any limitations with Pro account(may be like number of tokens). When we should upgrade to PBI Embedded Capacity(A1, A2)?

Would this method work for PBI Embedded within a PowerApps Portal?

Can i use this to show power bi dashboards embebbed with RLS in the website of the company where i work?

Hi Suppose if they are not users of powerbi when using rls

Hey, would it be possible to get which perspective (cube) an user selected on Excel and use it to explicit filter the cube? use-case: Perspectives just filter which structures should be shown (tables, columns, measures, etc...), however, I would like to filter my fact table based on the selected perspective. Sometimes some users that have the full permission to see the database wouldn't like to see all data in all contexts... It would be nice to filter the table lines differently per perspective.

I hate the limit of the embedded tokens.

Cool video, Adam (as always), one question, is this embed style works in Dynamics 365 F&O embed workspace as well ? Thanks

That's great but how do you get the effective usernsme in the first place? All power bi knows is service principal user which is anonymous if they don't sign to power bi how do we get the effective username? azure b2c or completely custom authentication/authorisation code? Thanks.

Amazing Video Adam! While generating tokens for PBI Embedded using PBI JavaScript library, how to secure the Master User Credentials? I mean if we hardcode them in Javascript, they are not secured. Please guide.

Hi! I have a report with a defined role and DAX expression "[ColumnName] = USERNAME()". I'm using app-only authentication initially, so far so good. When I call GenerateTokenInGroupAsync() in the C# API with an EffectiveIdentity, I get the following error: "InvalidRequest: Creating embed token for accessing dataset shouldn't have effective identity". Do you have any idea what I'm doing wrong?

would you have to add every user principal name? what about if you have about 100 users?

Can we show a message if you are not added I RLSlike "restricted contect and request for access to this content".... I have created an APP in which some reports are restricted and share with limited people but they can still see report name/pages in app and can click it but see cross error in values which is not a good user experience. Any solution to give better experience

Does RLS embedded work with multiple IDs? If yes, how? Thanks!

Thanks for the video - however, it doesn't answer the question I have. Say you have a list of users in Auth0 - how would I re-use the token Auth0 issues to pass into Power BI Embedded to show that user the appropriate content?

Hi Adam. I am using embedded with a tabular model that resides on SSAS on -prem. In such scenario, , I had to pass CUSTOMDATA instead of USERNAME in the code. The reason is that - once the USERNAME is passed via gateway to my on-prem SSAS, it must be validated against the domain and must correspond to an existing AD user. So If I need to pass the logged-in user in my web-app, the connection would fail. Using CUSTOMDATA, I can pass any string in the connection. Authentication to SSAS is done using the domain user the gateway is running under. Finally, I get information from CUSTOMDATA in my RLS code and do all the DAX magic there. In your opinion, is this a valid and correct scenario ?

I am receiving following error, what am I doing wrong? Microsoft.Rest.HttpOperationException: Operation returned an invalid status code 'BadRequest' at Microsoft.PowerBI.Api.ReportsOperations.d__34.MoveNext()

when i change "Viewing as " someone else, i don't see any change , still powerbi shows my account as viewer!

I saw this video and thought hurray after 2 days.... exactly what I am looking for. I have tried and failed to use your project or in mine changing the MS demo, to use the API for RLS embedded reports. It works perfectly in all of them for non-RLS on the same report. With RLS, it generates an error on the token generation, Microsoft.Rest.HttpOperationException: Operation returned an invalid status code 'BadRequest'. I am clearly missing something fundamental in my setup, but I have no idea what it is. The fact that non-rls works, hopefully it a clue?? Anyone?

But I have searched for "Rocket league Sideswipe" (RLS).........😂😂