Still looking into our Online reporting solutions. Looking like we're going to have to go with doing SSRS/SQL reports off a Azure DB (populated by Data Export Service) for a particular subset of reports, as we're just finding Fetch too limited for our needs.
I've found some good step by step guides on setting up the Data Export Service, so that part is now working fine. We've reviewed our security needs, and decided that the reports that are complex enough to need SQL aren't really the ones where we need to worry about security on a record or field level, just "do the right people have access to these reports". So while the lack of filtered views in the Azure DB is annoying, it shouldn't be a big issue if we just have to put user-level security on the reports. It would be great if we could tie these to roles in CRM somehow, but if there isn't a way then it's not a huge deal.
I can also see that we can add the report to D365 via the "Link to Webpage" report style, which is fine.
However, the piece where I haven't been able to find anything in the way of guides is in the middle - specifically, where Reporting Services lives and how it connects to the Azure DB. It looks like an Azure DB does not run SSRS, so Reporting Services has to live somewhere else. Either a totally separate (and therefore needing to be paid) Azure VM, or an on-prem server if you only need them accessible internally, I guess? Is there anything out there on how to set this up? I'll just keep hammering away, but if there's something out there it would be great. I see some previous questions here on the forum but no answers. :-(