RLSNotAuthorizedForImpersonation when loading visual using PowerBi Embedded

[dcieslicki]

Hi,

i'm using PowerBi embedded solution with service principal and when the report is loaded visual fails to load:

Couldn't retrieve the data for this visual. Please try again later.

Please try again later or contact support. If you contact support, please provide these details.

• Http Status Code401
• Activity IDbe7e2173-4ec6-41fa-befa-81fe6b0a161f
• Correlation ID80a891ec-febb-aa08-e181-d48c9b45db6e
• Request IDffaa310c-8908-54a3-6d73-5c53a6d8bdf9
• TimeTue Apr 14 2020 13:15:01 GMT+0200 (czas środkowoeuropejski letni)
• Service version13.0.12816.311
• Client version2003.4.025
• Cluster URIhttps://WABI-NORTH-EUROPE-redirect.analysis.windows.net

In the network in console for query data there is an error: RLSNotAuthorizedForImpersonation

Does anyone have any thoughts how to find an issue and fix this and what is this error in detail?

[MattCalderwood]

Hi @dcieslicki 

This looks like a possible embedded-token generation issue.
If your report is using Row Level Security - you will need to make sure you generate a token with the required identity.

Power BI REST API - Generate Token  

Check that you have included an 'Effective Identity' that matches the report RLS roles, like this..

"identities": [
    {
      "username": "user@my-app.com",
      "roles": [
        "report-rls-role-name"
      ],
      "datasets": [
        "my-dataset-id-xxxxx-xxxxx-xxxxx"
      ]
    }
]

 
If your report doesn't contain any RLS entries - then you will need to make sure that any token generated doesn't contain an identity, as you shouldn't supply one to a report that doesn't require it.

Let me know if any of this helps.