Which action should you perform to ensure embedded reports require authentication and only read-only (live) connections to cloud semantic models?

• A. From Capacity settings, set XMLA Endpoint to Read Write
• B. From Embed Codes, delete all existing codes
• C. From Premium Per User, set XMLA Endpoint to Off
• D. From Tenant settings, disable Publish to web

Answer: (D)

Disabling Publish to web from Tenant settings ensures embedded reports cannot be accessed anonymously; users must sign in to view the report. This makes authentication a requirement for the embedded experience. When embedded reports connect to cloud semantic models, they typically use a live connection, which means you're querying the model directly rather than working with a local, editable dataset—so the access is effectively read-only for users viewing the embedded report. Other options either affect write access to the XMLA endpoint or remove embedding entirely, but they don’t enforce authenticated access for embedded content in the same way.