You have a Power BI Premium Per User (PPU) workspace containing a semantic model. An Azure App Service app named App1 modifies the model's row-level security (RLS) via the XMLA endpoint. App1 currently requires user sign-in with Microsoft Entra credentials for XMLA endpoint access.

You need to configure App1 to use a service account for model access.

What should you do first?