How to get PowerBI Embed Token

 Here's a step-by-step guide to help you through the process.

Step 1: Register Your App in Azure

• 1. Go to Azure Portal → App registrations
• 2. Register a new app.
• 3. Provide necessary API permissions
• 4. Go to Certificates & secrets → Generate a Client Secret

 

Step 2: Assign the App to the Power BI Workspace

1. Go to Power BI Service

2. Click Workspace access

3. Add the App's Service Principal(App Registration ClientId) as an Admin or Member

Step 3: Get Access Token 

Request:

 Method: POST
 URL: https://login.microsoftonline.com/{tenant-id}/oauth2/v2.0/token

 

Headers:
Content-Type: application/x-www-form-urlencoded 

Body: (x-www-form-urlencoded):

grant_type=client_credentials
client_id={your-client-id}
client_secret={your-client-secret}
scope=https://analysis.windows.net/powerbi/api/.default

Endpoint will provide you with an Access Token

Step 4: Generate the Embed Token

URL: Post Endpoint 

https://api.powerbi.com/v1.0/myorg/groups/{groupId}/reports/{reportId}/GenerateToken

Headers

Authorization: Bearer <access_token>

Content-Type: application/json

Body

{

  "accessLevel": "View"

}

 

Power BI - PowerBIEntityNotFound Error in Embed Report

Typically, PowerBIEntityNotFound indicates that the requested resource (report, dataset, or workspace) could not be found under the access token's permissions. 

{

    "error": {

        "code": "PowerBIEntityNotFound",

        "pbi.error": {

            "code": "PowerBIEntityNotFound",

            "parameters": {},

            "details": [],

            "exceptionCulprit": 1

        }

    }

}

You need to check a couple of things.

1. Ensure the workspace GUID is accurate. 

You can find it in the URL when viewing a report:

https://app.powerbi.com/groups/{workspace-id}/reports/{report-id}

2. Is the Report ID correct?

    same steps as above.

3. Does the service principal have access?

Your Azure AD app (service principal) must be added to the workspace as a member or admin:

Go to Power BI Service → Workspace → Access

Add the service principal (client ID) as a Member or Admin

4. Ensure service principal access is enabled in tenant settings

In Power BI Admin Portal: Go to Tenant settings

Enable:

"Allow service principals to use Power BI APIs"

"Allow service principals to create embed tokens."

5. Ensure you are using the correct scope and authority in the token request.

SCOPE = "https://analysis.windows.net/powerbi/api/.default"

Check all the above steps, and it will resolve the issue.