Is master account required when embedding for your organization?

[NenadV]

I am trying to embed power bi report into my organizations internal web app, so I have one question regarding embeding for your organization approach. In "Embed Power BI content with service principal and an application secret" article in power bi documentation I read that you can not use service principal when embeding for your organization. But also, in microsoft power bi sample applications code there are no fields for entering master account credentials, so I suppose that master account is not required for embeding for your organization. So I am not sure how it is working, what is the way my application authenticate to Power BI?

[MattCalderwood · Accepted solution]

Hi @NenadV 

If you are embedding for your organisation and the users accessing your application all have Power BI Pro licences - OR the organisation has bought some premium capacity, then you can embed - but you need to generate an Azure Authentication token on behalf of the user using the app.

This article might point you in the right direction... Just make sure you follow the 'User Owns Data' route.
https://docs.microsoft.com/en-us/power-bi/developer/embedded/get-azuread-access-token#access-token-f...

Then, once you have an Azure AD token for the given user... you can specify the AAD token type, and supply the token to the JavaScript embedding configuration.

https://docs.microsoft.com/en-us/power-bi/developer/embedded/get-azuread-access-token#access-token-f...

Hope this helps, Matt