You have a Fabric tenant with a workspace named Workspace1 that is assigned to a Fabric capacity. You need to recommend a solution that allows users to create and publish custom Direct Lake semantic models using external tools, following the principle of least privilege.

Which three actions should you perform in the Fabric Admin portal as part of the recommendation? Each correct answer presents part of the solution.