Hello,
I'll start with directly answering your questions:
1. You cannot - you can only limit the options of using the custom/third party visuals.
2. You can apply the RLS or OLS in your semantic models, or you can reasonably split your semantic models.
3. You cannot simply block it.
I understand you are going for the Managed Self-Service operational mode.
I would suggest:
- putting in place Report Certification - once the report hits a givern number of Weekly Active Users, or the VIP users you it can go through the Certification process i which someone from the BI department audits the reports, lists all the points to be addressed and once the point are addressed the report becomes certified. It can also be centrallized
- If you're going for the centralization of the reports you can employ the rule - all not centrallized objects are deleted from PBI Tenant's if nor used in the last XXX months.
- Regular clean up of the unused objects -> you would like to avoid having 30 different Weekly Sales reports
- Monitoring of the reports, someone had an idea that "Self-Service" == Low Cost, which is untrue -> you will need a person becoming at least partially PBI Administrator and checking regularly what's happening with the reports help the users to keep the limited number of objects, run the archival process
- Monitor the RLS assignemnts and access rights
- You should start to monitor the PBI Tenant's settings -> Microsft releases the new settings frequently, most of them are enabled by defult for the organization -> it can cause you some troubles especially if you are running the Self-Service over the dedicated capacitites
You can also check the solution like this one: https://github.com/AstralForest/Power_BI_Monitoring to actively monitor everthying what's happening in your PBI Tenant.
