You may be able to get around it on SSRS reports (and eventually powerbi but not sure as Tabular requires Windows Authentication)

1 - Do not grant users access to Tabular
2 - Setup a generic user on SSRS with access to the tabular instance and setup your reports to use this user instead of the user running the report
3 - For each report Grant permissions to the users that need them - you may need to grant at a user level or to setup groups per block of reports - but that is standard SSRS

Long shot and not necessarily the best/unique solution