A semantic model should show managers only rows for their authorized business units. Where should this be enforced?

1. Only in a workbook prompt default
2. Only in the dataset's friendly name
3. In centrally controlled data-access rules bound to trusted identity context
4. Only in a hidden chart filter chosen by the author