We're swtiching our app to client_credentials from the master account setup. We do a lot of consulting with small medium businesses that most don't have RLS requirements. We create a workspace for that client and all report and dashboard objects are general reports for users of our system. (We do have some clients who have very intensive RLS needs, and we absoultely do use it, but it's an optional configuration based on that clients needs.)
So we take our app in password mode, which works... And setup for client_credentials: Get the ApplicationID, setup the client secret, create the AzureAD group... add the ApplicationID into the group, Add the group to PowerBI, and then add the Application to the workspace.
Thinking that should work... It doesn't. Now the reports are requiring EffectiveIdentity? I didn't change that. Why is this happening?
"{\"error\":{\"code\":\"InvalidRequest\",\"message\":\"Creating embed token for
accessing dataset xxxxxxxxxxxxxxxxxxxxxx requires effective identity to be provided\"}}"But sure, ok... I'll set it up... So I add an effectiveIdentity and then slap my email in as a test (it'll be easy to pull this from the logged in user, so whatever... Sure. Now I get this:
"{\"error\":{\"code\":\"InvalidRequest\",\"message\":\"Creating embed token for
accessing dataset xxxxxxxxxxxxxxxxxxxxxx requires roles to be included in provided effective identity\"}}"Again, most of our reports don't have roles, they are general reports that anyone with access to the system has access to all of the data. Some reports have a requirement, some don't.
How do I adjust this? I need to not require effective identity on some, but on others...
