We have embedded PowerBI graphs in our contact form, and they are working great and showing useful data. However, we want some users to see a certain set of records and other users another set. 
Within Dynamics, we are planning to create two teams, and make the teams the owners of the respective records. We can give a security role to the team which has "user only" privileges, and then add users to the correct teams. Would this be a reasonable strategy?
The next question is about the PowerBI charts though. All our users will have PowerBI Pro subscriptions, and are apart of a single PowerBI workspace containing the report we're displaying in Dynamics. For showing the chart, we simply created 1 report in PowerBi and use an onLoad javascript function that filters the report by contact in Dynamics. However, all our users could, if they wanted, go directly to PowerBI to see the report on every contact. Ideally, they should only be able to see reports associated with the contacts that their security role in dynamics allows for. Any thoughts on the best way to solve this issue? 
  
                            
                         
                        
                        
                            
                            *This post is locked for comments
                            
                            
                            
                            
                            
                            
                                I have the same question (0)