Composite Model published to App - users without direct user permission?

Hello,

In a workspace we have a new report published to App, the app audience is the entire organization, therefore the users are not having access to the workspace (Workspace A) or the semantic models itself. 
The report is built in composite model, the direct query connection is a semantic model (just import mode) from an Workspace B.

The users getting an error when they try to look at the report via the App.
I've tried to look around and found the user needs Read permission to the semantic model in Workspace B, but I do not know the individual users or even a group for them, as it is for all organization.
Can I somehow achieve that the end users are able to see the report in app without direct access to the semantic model in the other workspace (And without access to any of the workspaces). 
I was thinking if maybe if I change the mapping of the cloud connection to something else. I also have an enterprise gateway option but I'm getting lost how to achieve this.