Managing Permissions - Report vs. Dataset + Links

Hi all,

I am having a hard time understanding the functionality of sharing reports after the new service update. I would like to understand the following please:

I have been using the "Manage Permissions" button on reports and datasets and my questions are the following:

• Does a user need access to the Report AND Dataset to view a report?
• If a user only needs access to the report - what would be the reason to grant access to a dataset?
• The majority of my sharing will be to users who are just consumers, they wont need to make anything themselves - so what is best practise?
• Last, if I share via my own email with the "Copy Link" functionality, the setting is that "anyone with the link in your organisation can view". Therefore, if I sent this link to a select group of people and one forwarded it on to somebody else. Would this person then have full access despite me not sending it to them?

Overall really, I just want to know the best practise for ensuring I give the right permission to consumers and it not get to anybody I dont want it to

Thanks!