Good afternoon,
We have Power BI set up on our primary company directory, company.com. We're able to get the access tokens and access the Power BI Embedded reports without issue, using authorized credentials from our directory.
However, we have a B2B use case where our partners live in another directory, that we own and manage. We add our partner users to the second directory as a Guest User.
With our web app, Power BI Embedded reports are being served up in a configuration where the app owns the data. However, we wish to use the access token from the logged in partner user, on the secondary directory, to serve up the Power BI report.
Question: How can I grant access to an AAD user of another directory to my AAD Application and Power BI Embedded reports on my company directory? We wish to avoid "app owns data" scenarios for the purpose of tightly controlling and logging access to our sensitive reports.
Thank you in advance.