D365 Online does support Visual Basic Script (VBScript) embedded in SQL Server Reporting Services (SSRS) reports. However, the issue you're encountering with the RDL Sandboxing error is due to stricter security measures in place for online environments, including custom code in the <Code> element of a report definition.
Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.