We have a requirement to restrict a set of end user group to only allow use of per-approved content in SAC. A user from this group should not be allowed to create self service stories from personal excel/ csv/ text files. Though they can create stories from shared connections and models. They should always use provided models, datasets and live connections.
We understand that self service ("I'm feeling lucky" or "prepare dataset"- drag and drop) is one of the powerful suit of SAC. Not sure if there is any possibility to remove this function.
"BI Content Viewer" is the most restricted among all and it restricts drag and drop and upload of personal files. Though this also restricts model creation/ story creations from existing objects.
We understand that we may need to create a custom role for this, though not sure if we can restrict based on any available role property.