Few more additions to above questions:
1) Can we create a workspace inside workspacecollection in Azure portal?
2) What level security is implemented?It seems it is implemented at Workspace level, is it correct? If no, we can implement at report level?
3) How can i implement row level security in this approach?