Sharing dataset with RLS to external user and let them create report and publish

To share the dataset with a specific client, while ensuring that they only see their data and can create reports that can be embedded in your application, you can follow these steps:

1. Create a new workspace in your Power BI Premium capacity account, and share the workspace with the specific client's email address. This will allow them to access the workspace and the dataset.

2. Add the dataset to the new workspace, and configure row-level security (RLS) to ensure that the client can only see their data. This can be done using the same techniques you used for your current implementation.

3. Create a report in the new workspace using the shared dataset, and ensure that the report contains only the data for the specific client.

4. Share the report with the client, giving them the ability to edit the report.

5. Instruct the client to use the Power BI service to edit and publish the report to the same workspace.

6. Once the client has published the report, you can use the workspace id, dataset id, and report id to embed the report in your application.

Note that the shared dataset will refresh when the parent dataset is refreshed, so any updates made by the client will be reflected in your application.

Regarding your other question, if the client is able to create a report, they can publish it to the workspace you have shared with them, and then you can use the report id to embed the report in your application. The process of publishing the report to the workspace is straightforward, and can be done from the Power BI service.