You publish a certified semantic model to a workspace and want a colleague on a different team to build their own reports connecting to it in Power BI Desktop. The colleague is not a member of the workspace, and you do not want to add them to any workspace role or grant access to other items in the workspace. Which action grants the minimum access required?