De-couple the disabling of "download as .pbix" from the disabling of exporting data
Right now, if you want to disable peoples' ability to download reports as .pbix files from workspaces, you have to do it for the entire tenant, and this also disables all data export from reports. Please de-couple these functions and make them report-specific.
Settings for data export are already report-specific, so that's good. Now just give tenant admins the ability to disable JUST "download as .pbix" or JUST "export data". And then make it a report-level setting for workspace admins to enable or disable the ability to download as .pbix.