Prevent export underlying data

Here I got complete question:

You have a user named User11. User11 is a member of a security group named XYZ PowerBI.

User11 has access to a workspace named XYZ Workspace.
You need to prevent User11 from exporting data from the visualizations in XYZ Workspace.

Which is correct here:

1 From the Microsoft Office 365 Admin center, you modify the properties of XYZ PowerBI. (this is right according to me)

OR

2 From the Power BI Admin portal, you modify the Tenant settings. (Admin portal-- Tenant settings-- you can restrict groups and not individual)

OR

3 From the Microsoft Office 365 Admin center, you remove User11 from the All Users security group. (If you do so then user will not have access to anything)

OR

4 From the PowerBI setting, you modify the Developer Settings

My ans is 1