如何在 React.js App 中集成 power-bi 行级安全？

Question

I have integrated power-bi service(App Owns Data/service principle way) in my react.js App. Further I want to integrate RLS(Row Level Security) in the same. As mentioned in power-bi docs it is required to add c# code for embed token to generate and authenticate row level security.

c# code:

public EmbedToken GetEmbedToken(Guid reportId, IList<Guid> datasetIds, [Optional] Guid targetWorkspaceId)
{
    PowerBIClient pbiClient = this.GetPowerBIClient();

   // Defines the user identity and roles.
    var rlsIdentity = new EffectiveIdentity(
        username: "France",
        roles: new List<string>{ "CountryDynamic" },
        datasets: new List<string>{ datasetId.ToString()}
    );
   
    // Create a request for getting an embed token for the rls identity defined above
    var tokenRequest = new GenerateTokenRequestV2(
        reports: new List<GenerateTokenRequestV2Report>() { new GenerateTokenRequestV2Report(reportId) },
        datasets: datasetIds.Select(datasetId => new GenerateTokenRequestV2Dataset(datasetId.ToString())).ToList(),
        targetWorkspaces: targetWorkspaceId != Guid.Empty ? new List<GenerateTokenRequestV2TargetWorkspace>() { new GenerateTokenRequestV2TargetWorkspace(targetWorkspaceId) } : null,
        identities: new List<EffectiveIdentity> { rlsIdentity }
    );

    // Generate an embed token
    var embedToken = pbiClient.EmbedToken.GenerateToken(tokenRequest);

    return embedToken;
}

Answer 1

I achieved this using express.js and react.js

We need to get get Embed token using MSAL library(this can be done on server side only) and pass it on to client side using custom API call

by using embed token,client Id and power-bi embed client API we can generate report on client side

Answer 2

RLS won't be applied for apps using a service principal.

Reference: https://learn.microsoft.com/power-bi/enterprise/service-admin-rls#considerations-and-limitations