Custom Connector With Azure AD Login

[sanoj]

I am relatively new to Power Bi. I have the below requirement for the custom connector.

1) Users must be able to log in to the connector using their AZURE AD credentials. These users are members of an AD Security group(for example - powerBiDept12). For each department, there will be a separate AD Security group.
2) RLS must be enforced so that users belonging to a security group can access only their department data.
3) These users can only access the SQL objects in a schema. I.e there is a schema called 'prod' and these AD users can only access the SQL objects under this schema.

My doubts are how to list the 'prod' schema objects only after the user login using AZURE AD credentials.

[artemus]

Is there a reason you cannot simply enable AAD login to the SQL database and enforce it there?

Also note that any report generated can easily expose data across the org based on the report author's login credentials.

RLS can be used at the report layer, but that would be up to each report's author.