Embedded with Service Principale to realize the RLS

[Tattybear]

According to the online document, I download the demo. and I also input all the information.

when I try the "MasterUser" mode (Native App), I could use a new username as the viewer, and this username could be shown in the report. (The report only use the DAX function to show the username)

When I try the "Service Principale" mode, I couldn't use a new username as the viewer, and when the system want to get the embedded token from the API, it returns the error message as below:

"

Creating embed token for accessing dataset c19edf02-1723-4c74-8b5c-9669dd43426a shouldn't have effective identity

"

Does anybody have an experience with that? Or could you kindly give me an idea please?

If you have the relative experience, please kindly help me. thanks in advance.

[v-shex-msft]

Hi @Tattybear,

How did you configure your RLS roles? AFAIK, username and service principal may get the different values from the same user.

Please take a look at the below document of service principal if it meets your scenarios::

Row-level security with Power BI Embedded#working-with-analysis-services-live-connections 
Regards,

Xiaoxin Sheng