powerbi-secure-embed

name	powerbi-secure-embed
description	Reference for the Power BI secure embed URL format used by this template. Read when debugging report iframes, when a report fails to load, or when adapting the embed for a non-default scenario.

powerbi-secure-embed

What this template uses

This template uses "Embed for your organization" with autoAuth=true — the simplest of the three Power BI embed flows.

{FABRIC_PORTAL_ORIGIN}/reportEmbed
    ?reportId={itemId}
    &groupId={workspaceId}
    &autoAuth=true
    &ctid={tenantId}
    &actionBarEnabled=true
    &reportCopilotInEmbed=true

The embed origin is read from VITE_FABRIC_PORTAL_URL (set by rayfin up / rayfin env from RAYFIN_PUBLIC_PORTAL_URL). The same Fabric portal host serves the report embed endpoint — no fabric.microsoft.com → powerbi.com host swap is needed.

Fabric portal	Embed origin used
https://app.fabric.microsoft.com/	https://app.fabric.microsoft.com

The user's existing Power BI / Fabric session signs them into the iframe automatically. No embed token, no service principal, no Power BI Embedded capacity required.

All URL building lives in src/lib/fabricUrls.ts (getReportEmbedUrl, getOpenAppUrl, getOpenReportUrl) — change embed parameters there, not at call sites.

Reference: Embed Power BI content with service principal and secrets / "Embed for your organization"