AAD differentiate data for embed report

anyone knows how to differentiate based AAD Token. for instance, I have 100 records for the data set, I want token1 to view first 50 records, and token2 to view second 50 records. the real case will be more complex.

I read some article about RLS, and it doesn't apply to our case due to the complexity of permission management. we build new report/modify existing report very often, and we could have 10+ different user permission setting.