Thanks for the link, I will try. We dont have Roles but I can fake one.
The part that I have not understood is the "app token". I am not sure how I can pass on the token with username: and role:.
Do you know how can I send it?
For embedded I just use the url which I get from the Report object.