Report access control model

I'm looking to implement an environment where all members of a work space have read/write access to power BI reports published to the workspace and a select group of power users have read/write access to certain reports published to the group but no access to other reports.

Is the only way to achieve this to implement row level security over all reports? It seems overkill in complexity so wanted ot be sure there was no simpler solution.