You have new security and governance protocols for Power BI reports and datasets. The new protocols must meet the following requirements: New reports can be embedded only in locations that require…

Disabling 'Allow XMLA endpoints and Analyze in Excel with on-premises datasets' from Tenant settings would disable XMLA access for all capacities, including Premium, which contradicts allowing live connections for Premium capacity datasets.

Setting the XMLA Endpoint to Off for Premium per user restricts external tool access to those datasets, thereby helping to control and limit live connections to specific approved Premium capacity datasets.

Deleting all embedded codes from Embedded codes directly addresses the requirement that new reports can be embedded only in locations that require authentication, as existing public embed codes would bypass authentication.

Setting the XMLA Endpoint to Read Write from Capacity settings would enable full access for external tools, which contradicts the goal of limiting and securing live connections to meet specific governance protocols.

Setting 'Publish to web' to Disable in Tenant settings prevents users from publishing reports to the public web, thereby ensuring that all embedded reports require authentication.