Dynamic Row-Level Security (RLS) in Power BI Without Creating Roles

You're half describing how you should currently achieve data-driven dynamic RLS anyway. You will always need some user-SecurityMapping data to describe which user should see which data within a report i.e. [email protected] can only see Cost Centre: 1234. You could achieve this through appropriately named/tagged Entra Security Groups and have a query that gets all users/groups. You join this SecurityMapping table to the data that should be filtered i.e. SecurityMapping:CostCentre to Sales:CostCentre You then create 1 role "Data-Driven Dynamic" and apply DAX on SecurityMapping.User = USERPRINCIPALNAME() Your SecurityMapping filter then passes through and filters Sales appropriately based on that relationship.