How do i manage data permissions for apps with reports connected via live connection to datalake

[PowerNewUser]

In the past I could give access to an app without exposing the entire workspace to the users. This is my first app post switch to fabric where I created a lake with a semantic model based on it (live connect). The report in turn uses the semantic model to visualize the data. Now users who access the app can see the report but dont see the data - view details gives the following - 

Couldnt load the data for this visual
You dont have permission to view the content of the data lake table. 

Do i need to expose the workspace to all users? Or is there a setting I need to enable to give the app access to the lake ?

[PowerNewUser · Accepted solution]

Figured it out - posting in case anybody has a similar question. 
Ended up giving access to the lakehouse (it is required). But was able to implement row level security to restrict data visibility - 
Implement row-level security in Microsoft Fabric data warehousing - Microsoft Fabric | Microsoft Lea...