CI/CD: Automating semantic model security (RLS/OLS role members)

[FrederikAage]

I am working on automating CI/CD for semantic models in Power BI / Fabric.

I can successfully deploy semantic models and define RLS/OLS roles using TMDL, but I am unable to automate the assignment of users or Azure AD groups to those roles.

At the moment, role membership must be added manually through the semantic model security UI.

Is there any supported way to automate role membership for RLS/OLS, for example via:

- Power BI REST API

- XMLA endpoint / TOM

- Fabric REST APIs

My goal is a fully automated, repeatable deployment without manual post-deployment steps.