We have the below architecture to be built. The web application is not integrated with AD and has a its own user auth (User and Tenant mapping table). We need embed the PowerBI reports and use the app user table for RLS.
The architecture is as below. Please advise
https://ibb.co/DDWG6Rg
Note: Azure Analysis Services uses Azure Active Directory (Azure AD) for identity management and user authentication. Any user creating, managing, or connecting to an Azure Analysis Services server must have a valid user identity in an Azure AD tenant in the same subscription.
For more details, refer "Azure Analysis Services Authentication".
Power BI Embedded does support using RLS against AAS using the CUSTOMDATA() function.
For more details, refer similar ask in PowerBI forum: https://community.powerbi.com/t5/Service/Azure-Analysis-Services-RLS-and-Embedding/td-p/239127
Hope this helps.
Related
A 3rd party company shared a power bi report with me that I can access via the URL like https://app.powerbi.com/reportEmbed?reportId={report_id}&autoAuth=true&ctid={ctid}&config={config_string}
I have to sign in to my Microsoft account in order to view this report. (and it works with no issues)
Now I need to gain access to this report from within my .NET app.
I created an app registration at our Azure portal and granted all Power BI permissions to it.
However, I can't get access to the shared report as I'm getting an "Unauthorized" API error.
Am I right that I need to have an app registration on their Azure portal instead of ours?
I would like to call the Power BI Activity Log API with data factory each day to download the activity events into a blob store. I thought I'd use a Copy data activity with an HTTP dataset as source to call the REST API. How do I authenticate in the HTTP dataset's linked service? Do I need to register an Azure AD application with Power BI admin rights and refer to it in some way in the linked service?
Maybe you can have a look at Service Principals, it can help you to easily authenticate and access Power BI admin read-only APIs (ActivityEvents API included) without tying you to a particular user account. Its in preview feature as of today, but should be soon out of preview.
Also, for automating the fetching of logs using Azure Data Factory and ingesting it in Azure Blob, you may have a look at this great article which explains in detail, all the steps that will be required to create the pipeline. Should be helpful!
I have created an native app enabling powerbi service permissions in azure portal going through azure active directory -> app registration. Now I want to create power bi reports, workspace on that created app but if I go to https://app.powerbi.com I can't see that created app on my power bi app.
I am confused here actually how to add power bi reports under that app because I want to access power bi rest api using adal.js lib where I need app id and want to access reports under that app.
Anybody can clear my confusion here?
Your confusion is with the terms "Apps" in Power BI. The app you registered has nothing in common with these. It is a guid, used from Power BI to identify your native app.
When you create a native app, you register it (what you did) and Power BI REST API uses this appID (also called ClientID) to identify your app and the permissions it has. When you call the API, you need an access token. It will be acquired in the context of some user. This user must have rights for the reports you want to access. So simply make a workspace, grant rights to users and publish your reports there. Then you will be able to embed them in your app.
I have embedded power bi report public access url in my web application, which is not authenticated. Is their any way i can authenticate the report without using Azure AD? Please do reply with solution.
Thanks in Advance
Are you talking about 'Publish-To-Web' solution (https://learn.microsoft.com/en-us/power-bi/service-publish-to-web), if so - no, there is no way to authenticate access to such published report.
For getting authenticated access to embedded report, you should use PowerBI embedded (see https://azure.microsoft.com/en-us/services/power-bi-embedded)
I developed my own user database that I integrated with my Customer-Facing Web Portal. Each customer has a login/password that is stored in my own user db.
I Would like to know if can i use the Power BI embedded to embed a dashboard in my Web Portal and use Row Level Security to restrict access to some data based on User or another attribute (like "COMPANYNAME")?
Thanks!