Managing Semantic Model Permissions

Hi, tkramer 

You need to add users to the app's audience, so that the user will have app permissions by default.

If you choose to add users on the semantic model of the workspace, the user becomes read permissions, not application permissions.

At the same time, if a user is both the role of your workspace and the audience of the app, the role permissions of the workspace will override the app permissions.
If you initially have read permissions for other users on the semantic model of the workspace (without creating an app), this user will not become an app permission after creating the app, and you need to manually add him to the audience so that the app permission can override the read permission.
If you don't want users to download any of your reports and analyze in excel, you just need to leave the following options unselected when creating a workspace.

Other user view:

If you want users to default to app permissions, you just need to add users to your audience.

How to Get Your Question Answered Quickly

Best Regards

Yongkang Hua

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.